Vendors, assets & AI
Review a vendor's security information
Work through a vendor assessment, supporting documents, and a recorded outcome.
Before you start
Who this is for: Authorized vendor reviewers and the vendor's responsible owners.
- Open the correct vendor and review its service context.
- Choose an available questionnaire template and collect the information needed to answer it.
Follow these steps
Open or start the review
Open the vendor's review workspace and inspect any Open assessment before starting another. To begin a review, choose the Review type and Questionnaire template, provide a Review title, and use the start action. Verify the selected vendor and template.
Answer from evidence
Complete each question using information you have reviewed. Inspect the assessment's documents and their Requested, Received, Accepted, Rejected, or Waived states where available. A received document is not automatically an accepted document, and an unanswered question should not be recorded as a verified yes.
Record the decision
Choose the appropriate Outcome and Residual risk, then document Conditions / findings, Decision rationale, and Outcome notes. Explain any unresolved condition precisely. Use available finding or task options only when you intend to create that follow-up work and have permission.
Submit and verify
Submit the review through its action and inspect the saved outcome. Check the vendor's review history, required evidence, and resulting follow-up items. A questionnaire outcome is a recorded assessment judgment; it does not guarantee the vendor's future performance or prove every security claim.
What you should see
The assessment records reviewed responses, document decisions, and an outcome with traceable rationale.
If something doesn’t look right
The expected template is unavailable
Ask the administrator or program owner to confirm the available review templates rather than substituting an unrelated assessment.
A required document is missing
Keep its state accurate and obtain the document or record an authorized, explained waiver where supported.
A finding or task was not created
Check the selected options, permissions, and saved result. Review submission alone does not imply every optional follow-up was created.
Still need a little help?
Ask the assistant about these steps, or tell our team where you got stuck.
Contact support