- Knowledge Center
- Crosswalk Assessments
-
Basic Employee Training
-
Video Resources
-
FAQ
- Admin Portal
- Application Security
- Assets
- Assessment
- Audit
- Change Management
- Communication and Notifications
- Compliance Manager
- Data Security
- Document
- Endpoint Security
- Framework Control Manager
- Human Resources
- Incident Response
- Identity & Access Control
- Infrastructure(Network) Security
- Integration
- Physical security
- Policy and Procedures
- Report
- Risk Management
- Security Awareness Training
- SSO
- Ticket
- Training
- Users
- Vendor Management
- Vulnerability Management
- Miscellaneous
-
FAQ's for Admins
-
Release Notes
-
Role Management
-
Compliance Manager
-
Ostendio Document Wiki
-
Ostendio Crosswalk™
-
System Settings & Billing
-
Vendor Connect
-
Documents
-
Auditor Connect
-
Crosswalk Assessments
-
Assessments
-
Audits
-
Training
-
Tickets
-
Users & Groups
-
Ostendio API’s & Integrations
-
Risk Management
-
Collections
-
Office Hours
-
Partner Admin Portal
-
Framework Control Manager
-
Reports
-
Assets
-
Ostendio Platform Set-up
How to Review Assessment Questions as an Internal or External Auditor
The steps internal or external auditors need to take to review assessment questions in MyVCM 3.0.
1. Choose the Assessment of which you are responsible for auditing.
2. Review the answers and evidence provided for each question. Approve or reject the answers and evidence based on your review. You can make notes for each question that will be seen by the owner of the assessment when it is sent back to them. When rejecting a question, a note is required*
3. After approving or rejecting questions, you are able to send the assessment back to the original owner. They will be able to see the current status of each question and its evidence (approved or rejected), update any questions and evidence that need to be revisited, and send back to you as an auditor.
Note to the Requester/Auditor: If you lock the question while reviewing, the Responder will not be able to change their answer when you send it back to them. Be sure that you want to lock the question before completing this action.
Responder's View after Auditor has reviewed Assessment: