Vendor risk review
An enterprise customer sends a security and continuity questionnaire. Recovery objectives, testing evidence, and dependency mapping are all in scope, and the contract is waiting on the answer.
No assessments recorded yet
The workspace tracks findings, owners, and due dates across repeated assessments. Start by importing a completed scorecard, recording an assessment directly, or loading demonstration data to see how it works.
Practice 09 · Resilience & Continuity
Organization
Session only
Current posture
0/ 100
Tier 1 Reactive
Domain profile
Solid line is current. Grey line is the previous assessment. Dashed is the reference baseline.
Current
Previous
Reference
The reference ring is an illustrative planning model, not surveyed peer data.
Due in the next 30 days
Open findings with a date attached, soonest first.
Activity
Every status change and assessment, recorded for the audit trail.
Findings register
Owners and due dates attach to the control, not to a single assessment, so they survive every reassessment. A control that reaches "documented and current" closes automatically with a dated note; one that regresses reopens.
| Ref | Control & corrective action | Priority | Owner | Due | Status | Detail |
|---|
Trend history
Movement across reassessments. This is the chart that answers "what have you done about it since last year," which is the question that follows the first one.
Change since the previous assessment
And against your first recorded assessment.
Assessment history
Each recorded run, most recent first.
Testing record
Domain 6 asks whether the plan has been exercised in the last twelve months. This is where you hold the proof. Exercises recorded here appear in the evidence package.
Evidence package
One document answering a vendor risk questionnaire, an insurance submission, or a contracting officer's continuity request. Choose what to include, then export.
Readiness
What a reviewer will look for, and whether you can currently produce it.
Sections to include
All sections are drawn from data already in this workspace. Nothing is invented.
PDF export opens your browser print dialog. Choose "Save as PDF" as the destination.