Introduction to Risk Assessment in C1Risk

Follow this link to access the full training  manual

Introduction

The Assessment Section serves both internal and external assessment needs in the C1Risk Platform. The assessment section includes the ability to provide your own questions and custom-create assessments, browse more than 5,000 questions in our question library or choose from our pre-built Assessment Templates in your Assessment Template Library in the Platform. 

For a detailed overview of the functions of the Risk Assessment module, click here.

For a list of current Assessment Templates, click here

To access our Question Library, click here

In this training section, we will show you both how to get started and set up your assessments, as well as walk through each of the different use-cases identified below:

Use-cases

The following use-cases are commonly used by our customers (and don't forget our library of assessment templates ready for you to download to your environment any time:

Third-Party Risk Assessment

1. Third-Party Security Risk Assessments for Vendors
2. Vendor onboarding questionnaires for internal vendor engagement requests
3. Third-Party Issue Management and Risk Mitigation

Asset Impact Analysis

1. (CIA) Confidentiality, Availability, Integrity Assessments
2. Business Impact Analysis Assessments

Policy Training / Attestation (see also Policy Attestation alternative option)

1. Policy Training Questionnaire
2. Policy Simple Attestation Questionnaire

Set-up For Administrators

1. Getting Started: Brief Overview of the Assessment Module and functionality
2. Vendor and/or Asset Configuration
3. How to Build an Assessment
   • Choose an Assessment Template
   • Upload your own Assessment
   • Use the Question Library to create your own Assessment
     
4.  How to send an Assessment
5. Monitoring or on-screen Answering
6. Auto-create and edit findings
7. Provide Assessment Reports

Training to Provide to Assessment Responders

1. How to respond to an Assessment
2. How to respond to Findings in the C1Risk Platform

Use-Case Training

1. Third-party Onboarding (internal)
2. Third-party Security Review (external)
3. Third-party Issue Management (external)
4. Business Asset Impact Analysis (internal)
5. Policy Training (internal/external)
6. Security Awareness Training (internal)