Skip to content
  • There are no suggestions because the search field is empty.

Security Profile Assessments

Once you are satisfied that you have enough information to assess the vendor, you can Generate a risk assessment from the Actions button.

  1. Click the Vendor Risk icon in UpGuard’s left-hand navigation panel.
  2. Ensure you’re on the Vendor’s tab.
  3. Select a vendor (or monitor a new vendor).
  4. Select Security Profile from the expanded options under the vendor’s name in the left-nav.
  5. Click Actions.
  6. Click Generate risk assessment.

When you do this for the first time, this will kick-off the AI report generation, which will generate report commentary. This usually takes less than 1 minute and generates an executive summary, vendor background, and summary of each of the 7 security domains based on the evidence you included and your vendor’s risk profile. You can review and edit the commentary, or re-generate at any time if you add or remove evidence or change control status.

You can also highlight key risks by selecting the tick next to each risk. Only key risks will be listed in the published (PDF) report.

Once you are happy with your commentary and assessment you can choose to publish your assessment and  set a re-assessment date. This will save a point-in-time view of your risk assessment, and allow you to generate a PDF report which can be shared with others in your organization.

To generate a report select Security profile risk assessment report from the Generate report menu.

You can then access and share your report from the Generated reports section. Your generated report will summarise the findings of your Security profile risk management and assessment.

Adjust risk assessment commentary settings

You can refine some settings related to how your AI assessment is written. Commentary settings are person-specific.

  1. Click the Vendor Risk icon in UpGuard’s left-hand navigation panel.
  2. Ensure you’re on the Vendor’s tab.
  3. Select a vendor (or monitor a new vendor).
  4. Select Security Profile from the expanded options under the vendor’s name in the left-nav.
  5. Click Actions.
  6. Click Generate risk assessment.
  7. Click Refine.  
  8. Adjust the settings. You’ll be able to update:
    1. Audience: technical or non-technical
    2. Level of detail: low, medium, or high
    3. Custom prompt
    4. Scope: choose the sections whose commentary settings you want to change. Only selected sections will be affected.
  9. Click Apply.

Your AI assessment will be rewritten, taking into account the updated settings.