Table of Contents

0 Overview        2

1 Add Vendors or Assets for Assessment        2

Adding Vendors or Assets        2

Adding Primary Contacts to Asset Records        4

2 Onboarding and Tracking Vendor Status        5

3 Adding Assessment Templates        7

4 Sending Assessments to Assets or Vendors        7

5 Monitor Sent Assessments and Assessment Responses        11

6 Review Responses, Remediate and Create (bulk) Findings        14

Review and Create Bulk Findings        14

7 Export Completed Assessment to Reports (.PDF or Excel)        19

0 Overview

In this training section, you will learn how to complete the following tasks:

1. Add or upload vendor or asset records, assessment questions and and assessment templates
2. Onboard and Track Vendor Status
3. Choose and set up Assessment Templates
4. Send Assessments
5. Monitor responses
6. Review completed assessments & create findings
7. Export assessments and create reports

1 Add Vendors or Assets for Assessment

Vendors or Assets for assessment can be added to the 1Risk platform in the Asset Directory. Records can be added in bulk using the Asset Upload Template, or individually at any time.

Currently, Asset Types can be added individually in consultation with your Account Manager or by contacting support@c1risk.com

Adding Vendors or Assets

1. Go to Enterprise in your 1Risk Platform
2. Click on Assets
3. Select Asset Type
4. Click Add New
5. Populate the record fields* and click Save

Note: Asset Record Fields can be customized to capture different data sets. Contact your account manager or support@c1risk to customize vendor/asset records.

Adding Primary Contacts to Asset Records

All assets should have an associated asset owner or “primary contact”. Primary Contacts are registered as general users on your 1Risk Platform. Learn how to register users here

To add primary and additional contacts to an Asset record, follow these steps below:

1. In the contacts section of the asset record, use the drop down menu to select or type the first and last name of the contact to facilitate a search
2. Click Save
3. Note, there can be only one Primary Contact, however, multiple additional contacts may be added

2 Onboarding and Tracking Vendor Status

Vendors can be managed through the entire supply chain lifecycle on your 1Risk Platform from onboarding, to security review, to active, and decommissioned. In the Vendor record, use the “Onboarding Status” section to track the lifecycle of your vendors.

1. Go to the Vendor Record “Details” Section
2. Click Edit
3. Use the dropdown menu to select the Onboarding Status (Customizable fields - please see your account manager or contact support@c1risk.com) and click Save.
4. Monitor your vendors by Status in the Vendor Assets page.

3 Adding Assessment Templates

C1Risk provides pre-configured Assessment Templates for use, or you can add your own templates at any time. A list of templates of existing templates can be found here, or contact support@c1risk.com for assistance.

1. To view the Assessment Templates in your 1Risk platform, go to Administration and select Assessment Templates.
2. For support adding new Templates, contact support@c1risk.com or your account manager.

4 Sending Assessments to Assets or Vendors

Assessments can be sent to internal assets or external vendors/clients/customers from your 1Risk platform.

1. Go to Risk and select Assessments from the drop down menu
2.  Click Add New
3. Name the Assessment
4. Select the desired Assessment Template using the drop down menu or by typing the Template name
5. Select one or more assets/vendors using the drop down menu
6. Select the due date for the Assessment
7. Click Save
8. The Primary Contact for each Asset selected will now receive an email notification that an Assessment is awaiting response.

5 Monitor Sent Assessments and Assessment Responses

You can monitor the status of sent assessments, percent to completion and review answers at any time in your 1Risk platform, either from the Vendor or Asset record or from the Risk Management > Assessment section of your platform.

6 Review Responses, Remediate and Create (bulk) Findings

You will receive a notification once an assessment respondent completes their assessment. You may now go back into the system to review and create any Findings, which may then be sent back to the responder for mitigation.

All assessment templates in C1Risk have pre-populated findings to enable you to expedite your review by highlighting responses that require findings.

You may also print and export reports which can then be reviewed directly with the responder.

Review and Create Bulk Findings

1. As the Reviewer you will be notified via email of an assessment response

1. Click on the link in the email to be taken to the 1Risk platform and the corresponding assessment.

2. Go to the Answer Section in the assessment record
3. Click Create Bulk Findings
4. All responses with findings will be highlighted in orange.
5. Use the tracking bubbles to go to the findings
6. Edit the Findings as-needed, including the following:

1. Finding name and description
2. Recommendation
3. Due Date (required)
4. Primary Contact (auto populates to responder)

7. Click Save for each finding (Note the response bubble turn from orange to blue)
8. NOTE: You may also choose to reject the finding by clicking Cancel
9. NOTE: You may also add Findings to any other question response by clicking “Add” by by the selected question
10. When you have completed your review and addition or subtraction of findings, click Accept
11. Responder will now receive an email notification that Findings are awaiting Mitigation

7 Export Completed Assessment to Reports (.PDF or Excel)

The reviewer may export a completed (or incomplete) assessment to a .PDF or Excel file at any time.

1. In the details section of the Assessment record, click Export to PDF/Excel