Vendor Risk Questionnaire

[anand-bhosle]

Hi GRC users,

We have vendors who are submitting their questionnaire responses. We would like to know if there's a way to generate a report based on their responses. For example, I have questionnaires with choice & string data type fields and I can run a report on  Assessment Instance Question "asmt_assessment_instance_question" table but I can only see the string value field but no choice field value/response.

This is making difficult to see what option the vendor has submitted in a report. Is there any way to run a report and see their submitted responses?

Thanks in advance.

[Connor Levien]

@anand-bhosle you are correct the Vendor risk assessment responses to the individual questions you send them are stored in the asmt_assessment_instance_question. You can create a report and point it at this table, please note you will need to filter it to only look at the assessments you are considering.

For choice fields you can use the "String Value" field on the asmt_assessment_instance_question table which stores the selected choice fields display values. The value field stores the numerical value or technical value of the choice. So instead of grouping by the Value column group by the String Value instead. Alternatively you can also create a DB view to join the assessment instance response table to the metric definition choice table to get the corresponding display values

[Phil Addison]

For the VRA (risk assessment), if you select “view responses” on the VRA form, you’ll see a very user friendly display of their responses. On that screen, there is an option to “export responses”. That will create an excel spreadsheet.

Hope that helps.