Risk Assessments Guides

Choose the assessment that matches the risk you need to evaluate. Each one can be completed manually or with AI analysis of uploaded documents.

• Cybersecurity: Security posture and controls — access, encryption, vulnerability management, incident response
• Regulatory Compliance: Alignment with the regulations in your regulatory perimeter
• Operational Risk: Operational processes and internal controls
• Business Continuity: Continuity planning and disaster recovery preparedness
• Data Privacy: Data privacy controls and privacy-law obligations
• Infrastructure Security: IT infrastructure and network security
• SOC Compliance: SOC 1, SOC 2, and SOC 3 report review and control effectiveness

Managing risks from third-party vendors is crucial for maintaining your organization's security posture. RiskShield AI simplifies this complex process.

Vendor Onboarding

Add vendors to your platform via the Vendors page. Enter basic information such as company name, primary contact, industry, and relationship type.

Send Invitations: Use the Third-Party Assessment page to send secure assessment links to your vendors.

Track Progress: Monitor submission status for each vendor and receive notifications when assessments are completed.

Continuous Monitoring: Track vendor status and schedule periodic re-assessments.

RiskShield AI uses a streamlined vendor status system with three statuses that track each vendor's lifecycle. Understanding these statuses helps you maintain proper oversight, control your active-vendor count, and stay compliant.

Statuses

Active: Providing services and actively monitored. Only Active vendors can have assessments, questionnaires, and document requests. Counts toward your plan's active-vendor limit.
Actions: Mark Under Review · Deactivate

Under Review: Still monitored, but new assessments and document requests are paused while a decision is pending.
Actions: Approve & Activate · Deactivate

Inactive: Relationship ended or paused — no monitoring or assessment activity. Historical assessments and documents are preserved.
Actions: Reactivate (subject to your active-vendor limit)

Active-Vendor Limit & Billing

Your plan includes a maximum number of active vendors. Only vendors in the Active status count toward this limit — Under Review and Inactive vendors do not. If you try to activate a vendor when you are already at your limit, RiskShield will prompt you to either set an existing Active vendor to Inactive or upgrade your plan.

To prevent gaming the limit, a vendor that was activated during your current billing period keeps consuming its slot until the period resets, even if you set it to Inactive in the meantime. The slot frees up automatically at the start of your next billing period.

Changing Vendor Status

Only administrators can change vendor statuses. To change a vendor's status:

1. Navigate to the Vendors page
2. Click on the vendor to open their details modal
3. Locate the "Vendor Status" section (admin only)
4. Click the action button for the change you want
5. Confirm the status change when prompted (deactivating asks you to confirm)

All status changes are automatically logged in the vendor's activity history with timestamp, user, and previous status for audit purposes.

Best Practices

• Keep Active lists clean: Set vendors to Inactive when a relationship truly ends so your active-vendor count reflects live relationships
• Use Under Review deliberately: Remember it pauses new assessment activity — reactivate the vendor when you need to run an assessment
• Document decisions: Use the activity log to capture the reason for significant status changes
• Plan around billing periods: Because activated vendors hold their slot until the period resets, avoid rapid activate/deactivate cycling

Leverage the power of AI to accelerate your risk assessments while maintaining accuracy and compliance.

How it Works:

Document Upload: Upload your organization's policies, procedures, SOC reports, and other relevant documents.

AI Processing: Our AI models analyze the content, extract key information, and match it against assessment questions.

Suggested Answers & Evidence: The AI provides suggested answers with direct quotes from your documents as supporting evidence.

Review & Approve: You review the AI's suggestions, make any necessary edits, and approve the final answers.

This significantly reduces the time and effort required to complete complex assessments.