Program Metrics Overview Page

The Program Metrics Overview page provides a summary snapshot of your vendor risk.

You can view snapshots of vendor risk assessment progress and your overall risk based on overall vendor population.

If you want to view more detailed information, you can navigate to the other pages.

Overview Page

1. If you want to view a snapshot of your overall progress in assessing vendors, go to View Overall Vendor Assessment Progress.
2. If you want to view a snapshot of vendor assessment by master step, go to View Vendor Assessments in Progress by Master Step.
3. If you want to view a snapshot of risk across your vendor portfolio, go toView Overall Vendor Portfolio Risk by Percent.
4. If you want to view a snapshot of CORL assessment turnaround time, go to View Assessment Turnaround by CORL Timeline.
5. If you want to view a snapshot of vendor assessment turnaround time, go to Review Median Vendor Turnaround Time.
6. If you want to view details of your current contract, go to View Current Contract Period.

Back to Top

View Overall Vendor Assessment Progress

You can view a snapshot of your overall vendor assessment progress during the Date Range. If you want to take a deeper dive into the numbers, navigate to the Assessment Progress page.

Vendor Assessment Progress Summary

• Planned Assessments: This number tells you the number of assessments you purchased for the current contract period. The number is a count based on your contract.

Tip: If you see N/A, that means you have a different type of contract, for example, you purchased Managed Service Hours (MSH) instead of assessments.

• Open Assessments: This numbers tells you how many vendor assessments CORL is currently working on that still need to be completed. The number is a count of vendors with open tasks (Master Steps) and with a Delivery Status that is not Closed or Abandoned. If you want to take a deeper dive, navigate to the Open Items page.
• Completed: This number tells you how many vendor assessments CORL has completed. The number is a count of vendors where all tasks (Master Steps) are marked complete, and Delivery Status is marked closed. The count includes vendors who have completed remediation. If you want to take a deeper dive, navigate to the Assessment Progress page.
• In Remediation: This number tells you how many vendors have completed their assessments and are now undergoing remediation. The number is a count of vendors where the Master Step is remediation and with a Delivery Status that is not Closed or Abandoned. If you want to take a deeper dive, navigate to the Risks and Remediation page.
• Remediated: This number tells you how many vendors have completed both their assessments and their remediation. The number is a count of vendors where the remediation Master Step is complete and with a Delivery Status of Closed. If you want to take a deeper dive, navigate to the Risks and Remediation page.
• Terminated: This number tells you how many assessments were terminated and not completed. The number is a count of vendors where the Master Step is terminated, and the Delivery Status is closed. If you want to take a deeper dive, navigate to the Assessment Progress page.

Back to Top

View Vendor Assessments in Progress by Master Step

In the Current Master Steps section, you can view a snapshot of open assessments by Master Step. For more information, see CORL Assessment Status.

If you want to take a deeper dive into the numbers, navigate to the Open Items page.

Current Master Steps

• The visual lists each Master Step and for each Master Step indicates the number of Open Assessments and On Hold Assessments.
• The visual is interactive. If you click a Master Step, the numbers in the Overall Vendor Assessment Progress section update to reflect the progress for that step.

Back to Top

View Overall Vendor Portfolio Risk by Percent

In the Portfolio Risk Rating Breakdown section, you can view an overall snapshot of third-party risk for all environments that have been assessed.

If you want to take a deeper dive into the numbers, navigate to the Risks & Remediation page.

Portfolio Risk Rating Breakdown

• Managed: The assessment identified controls that are implemented and aligned with reasonable industry practice. The likelihood of a breach is minimized to a level where no remediation is necessary, and the vendor should maintain the controls that are in place.
• Low: The assessment identified controls that are partially aligned with reasonable industry practice. Remediation is encouraged; although, there is a low likelihood of an immediate breach.
• Medium: The assessment identified controls that are partially implemented and partially aligned with reasonable industry practice. Remediation activities should be identified and planned with corrections implemented in the near term to avoid a potential breach.
• High: The assessment identified few controls that are implemented and aligned with industry best practice. Remediation activities should be identified and planned with corrections implemented as there is a high likelihood of an imminent breach.
• Very High: The assessment identified a vulnerability that indicates an existing or imminent breach. Incident response activities should be activated.

Back to Top

View Assessment Turnaround by CORL Timeline

In the CORL Turnaround Time (In Median Days) section, you can view how quickly CORL is turning around Executive Summaries. You can determine whether CORL is responding in a timely manner and meeting the standard SLA of 5 business days.

If you want to take a deeper dive into the numbers, navigate to the Historical Progress page.

CORL Turnaround Time

• Executive Summary: This number tells you the median number of business days for CORL to turn around the Executive Summary. The number is a count of median business days taken to turnaround Executive Summaries where the Master Step Report is not Report-CVR, the Actual Completion Date is blank, and the Delivery Status is not equal to closed.

Back to Top

View Assessment Turnaround by Vendor Timeline

In the Vendor Turnaround Time (In Median Days) section, you can view how quickly vendors are responding to questionnaires, providing evidence, and completing remediation. You can determine whether vendors are responding in a timely manner and meeting SLAs.

If you want to take a deeper dive into the numbers, navigate to the Historical Progress page.

Vendor Turnaround Time

• Questionnaire First Step: This number indicates the median number of business days for the vendor to complete the first questionnaire. The number is a count of median business days for the vendor to turn around the first questionnaire where the Actual Completion Date is not blank and where the Delivery Status is equal to closed.
• Questionnaire Full Process: This number indicates the median number of business days for the vendor to turn around a series of questionnaires. The number is a count of median business days for the vendor to turn around a series of questionnaires based on the start date of the first step and completion date of the last step. The Actual Completion Date is not blank, and the Delivery Status is equal to closed.
• Remediation Each Return: This number indicates the median number of business days for the vendor to complete remediation. The number is a count of median days for the vendor to complete the Master Step Obtain-Rem where the Actual Completion Date is not blank and where the Delivery Status is equal to closed.

Back to Top

View Current Contract Period

In the Current Contract Period section, you can view the details of your current contract. You determine how many assessments you have left to use by the end of your current contract period.

Current Contract Period

• Current Assessments to Contracted: This number indicates the number of remaining assessments / the total number of assessments in the contract.
• Contract Dates: The dates indicate the contract start date / contract end date.

Back to Top