Reporting & Analytics Overview

Question 1

Reporting & Analytics Overview

Answer 1

-Due diligence data
-Reporting on residual risk
-Contract language
-Analytics drive decisions
-Risk acceptance and escalations
-Enhanced continuous monitoring

Question 2

Due Diligence Data

Answer 2

Where to get it?
How to Rate it?

Question 3

Due Diligence Data:
Where do you get it?

Answer 3

-Risk assessments
-Security reports
-Continuing monitoring reports
-Incident notifications
-Negative news alerts, etc.

Come from a number of places, IRA, remote questionnaires, continuous monitoring.

Question 4

Due Diligence Data:
How to rate it?

Answer 4

-Based on your organization’s risk appetite
-Not all due diligence data is the same.
-You weigh remote questionnaire different than a physical on site review.
-Rate things lighter from a security tool than a physical validation.
-You will not treat all data the same.