Admin
Maintains access and the people used for assignment.
Can
- Manage Users, People
- View security questionnaires, Inspections, Audits, controlled documents
- Vendor IT Security Assessment
- Roles and permissions
Who can do what in Vendor IT Security Assessment
Assign inspection, questionnaire, audit and document decisions to the right people.
Who can do what
| Role | Questionnaire intake | Control responses | Security inspections | Nonconformance and correction | Audit work | Documents and acknowledgments |
|---|---|---|---|---|---|---|
| Admin | Edit | — | Edit | Edit | Edit | Edit |
| Inspector | View | Edit | Edit | Edit | — | View |
| Reviewer | Approve | View | Approve | Edit | — | — |
| Assessment Owner | Edit | View | View | — | View | — |
| Corrective Action Owner | — | — | View | Edit | — | — |
| Auditor | View | — | — | — | Edit | View |
| Document Controller | View | — | View | View | View | Edit |
Each role in detail
Inspector
Runs assigned inspections and captures control evidence.
Can
- Manage Inspections, inspection checks, security answers
- View security questionnaires, controlled documents
Starts on: Planned inspections
Reviewer
Decides inspection and questionnaire outcomes and assesses elevated control risk.
Can
- Manage Inspections, security questionnaires, Nonconformances
- View inspection checks, security answers, corrective actions
Reviews and approves
- Approve Inspections, security questionnaires
Starts on: Questionnaires to send
Assessment Owner
Owns vendor questionnaire follow-up and due dates.
Can
- Manage security questionnaires
- View security answers, Inspections, audit findings
Starts on: Questionnaires to send
Corrective Action Owner
Investigates linked nonconformances and records corrective work.
Can
- Manage corrective actions
- View Nonconformances, Inspections, inspection checks
Starts on: Open nonconformances
Auditor
Plans audit work and records findings for an engagement.
Can
- Manage Audits, audit findings
- View controlled documents, training acknowledgments, security questionnaires
Starts on: Audit engagements
Document Controller
Maintains controlled security documents and acknowledgment records.
Can
- Manage controlled documents, training acknowledgments
- View People, Audits
Starts on: Documents in review
Set up Vendor IT Security Assessment your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.