Questionnaire review

Step by step

1. Prepare request Assessment Owner

   The Assessment Owner records the vendor, questionnaire version, due date and owner. This identifies the review cycle before answers arrive.

   • Name the vendor, version, due date and owner.
   • Updates Security questionnaires, People

2. Send request Assessment Owner

   The owner advances the questionnaire from draft to sent and follows up through the agreed vendor exchange channel.

   • Show that responses are being requested.
   • Updates Security questionnaires

3. Capture responses Inspector

   The Inspector records each control code, answer, evidence attachment and risk rating against the right questionnaire.

   • Attach answers, ratings and evidence to the request.
   • Updates Security answers, Security questionnaires

4. Review answers Reviewer

   The Reviewer reads responses in their questionnaire context, paying particular attention to high and critical ratings.

   • Inspect elevated and ordinary control responses.
   • Updates Security answers, Security questionnaires

5. Decide outcome Reviewer

   The Reviewer accepts or rejects the questionnaire after examining the evidence and the requested scope.

   • Record approval or rejection of this questionnaire.
   • Updates Security questionnaires
   ApprovalA person approves before the work moves on.

Assessment Owner

, Inspector, Reviewer, Admin