Program Metrics Risks and Remediation Page

The Risks & Remediation page provides an in-depth look at remediation progress and the impact on risk.

The page displays all assessments in remediation.

Risks & Remediation Page

1. If you want to view risks, go to View Vendor Risk by Priority.
2. If you want to view remediation progress by percent, go to View Vendor Risk Remediation by Percent.
3. If you want to view remediation by an assessment control group, go to View Vendor Risk Remediation by Control Group.
4. If you want to view remediation progress by timeline, go to View Vendor Risk Remediation by Timeline.
5. If you want to view remediation progress by status, go to View Vendor Risk Remediation by Status.
6. If you want to view remediation progress for a specific vendor, go to View Vendor Risk Remediation by Vendor.

Back to Top

View Vendor Risk by Priority

In the Risks by Priority section, you can view risks by remediation priority.

Risks by Remediation Priority

• High: This indicates risks that should be remediated as soon as possible.
• Medium: This indicates risks that should be remediated in the near term.
• Low: This indicates risks that should be remediated.

Back to Top

View Vendor Risk Remediation by Percent

In the Percent Remediated section, you can view remediation progress by percent.

Percent Remediated

• Percent Remediated: The number indicates the percentage of risks that were remediated where the due date is less than or equal to today.

Back to Top

View Vendor Risk Remediation by Control Group

In the Control Group section, you can view remediation progress for each assessment control group.

Assessment Control Group

Tip: If you select a Control Group, the Vendor table displays the specific Control Number.

• Control Group: This indicates the name of the assessment control group.
• Count: This indicates the number of items in remediation for that control group.

Back to Top

View Vendor Risk Remediation by Timeline

In the Remediation Progress by Recommended Due Date section, you can view remediation progress according to a timeline that displays the year and the quarter.

The visual is color-coded by remediation status: Remediation Complete, Remediation in Progress, and Risk Outstanding.

Remediation Progress by Recommended Due Date

The visual is interactive. You can select any time slice if you want to view data for a specific year and quarter. You can also select a remediation status.

• Remediation Complete: This indicates the number of controls that have been remediated.
• Remediation in Progress: This indicates the number of controls currently undergoing remediation.
• Risk Outstanding: This indicates the residual risk, the risk that remains after implementing controls.
• Time Slice: This indicates the quarter and the date.

Back to Top

View Vendor Risk Remediation by Status

In the Risk Remediation Status section, you can view remediation progress by status.

Risk Remediation Status

• Client Accepted Risk: This indicates the number of controls where the vendor did not meet the control requirements and you accepted the risk.
• Remediation Complete: This indicates the number of controls that have been remediated.
• Remediation in Progress: This indicates the number of controls currently undergoing remediation.
• Remediation Not Pursued: This indicates the number of controls where remediation is not being pursued.
• Risk Outstanding: This indicates the residual risk.

Back to Top

View Vendor Risk Remediation by Vendor

You can view a list of all vendors in a table format.

The table displays one row for each remediation item.

Vendor Assessments by Remediation Progress

• Vendor Name: This indicates the name of the vendor being assessed.
• Environment: This indicates the environment being assessed.
• Control Group: This indicates the assessment control group.
• Control Group #: This indicates the specific assessment control number.
• Tier: This indicates the remediation priority.
• Recommended Due Date: This indicates the date CORL recommends that the vendor complete remediation.

Tip: You can click the date if you want to drill down to hour or up to week.

• Risk Strategy Status: This indicates the remediation status for that control.

Back to Top