Organization: Assessments

The Assessments page [ Organization ➔ Assessments] in the Security Posture Management application provides efficiency and automation throughout your control framework self-assessment process. This capability includes out-of-the-box automated mappings of the risk vectors to popular control frameworks.

Custom control framework mappings can also be supported. Speak to your Account Manager or Bitsight representative if interested for details on how this works and cost.

Assessments help with:

• Compliance with both internal and regulatory requirements.
• Identify high-risk areas aligned to a control framework.
• Prioritize resources to focus on specific questions and the areas of greatest risk.
• Focus limited resources on follow-up actions that lead to more impactful risk reduction.
• Reduce the time it takes to complete an assessment.
• Understand how third parties may view you in Bitsight through the control framework lens.
• Facilitate easier conversations with stakeholders about the Bitsight Security Rating through alignment to a control framework.

Questions that are flagged indicate risk vectors mapped to the question are performing poorly.

Actions

Switch Assessments

Instructions: Select an assessment from the Switch Assessments dropdown menu at the top.

Download Question Details (.pdf)

Instructions:

1. Select a question to open the Question Details sheet.
2. Select Options at the top-right of the Question Details sheet.
3. Select Download Details.

Export Assessments (.csv)

Instructions: Select Download CSV at the top-right.

Search

Search across all text presented in an assessment report.

Instructions: Enter your search text into the Search… bar at the top-right.

View Question Details and Related Findings

Instructions

Findings for a risk vector:

1. Select a question to open the Question Details sheet.
2. Select the findings count to the right of the risk vector.

Multiple risk vectors:

1. Select a question to open the Question Details sheet.
2. Checkmark selected risk vectors.
3. Select View Findings.

Fields

Question ID

An identifier for the question.

Question

The question.

Risk Vectors

Risk vectors that are mapped to the question.

Section & Sub-Section

The section or sub-section of the questionnaire.

Filters

Flags

Filter flagged and unflagged questions.

Grades

Filter by risk vector grades.

Mapped Questions

Filter by mapped and unmapped (no associated risk vectors) questions.

Risk Vectors

Filter by risk vectors.

Section

Filter by section.