Evaluate a vendor

Create and conduct a GRC evaluation targeted at a vendor.

A vendor is the company's registration and its contacts. A vendor assessment is the evaluation cycle directed to this registration. "Assessment" is the name used in the interface for an evaluation.

What you will do

You will locate an active vendor, create an evaluation linked to them and follow the response flow until completion.

Who can do this

Users with access to the GRC module and the New evaluation action in the active organization. Creation depends on available capacity for assessments.

Before you start

Confirm that the organization served is active before starting the vendor evaluation.
Have an active vendor already registered.
Confirm that the license includes assessments and has remaining quantity.
Have a framework and an evaluation method available.

Menu path

To check the registration, select GRC → Vendors. To create or track the evaluation, select GRC → Assessments → Vendor assessments.

Steps

In Vendor Assessments, use Filter by vendor to locate existing reviews.
Select New evaluation.
In Vendor, choose the registration that will be evaluated.
Enter the name of the evaluation.
Select the Framework and the Evaluation method.
Select Create and wait for the confirmation Created vendor evaluation.
Open the created assessment and answer the controls with a note and mandatory observation or justification of Not applicable.
When you need the vendor's participation, use an active contact registered to send the invitation available in the evaluation.
After completing the controls, submit the evaluation and follow up the approval until the status Completed.
To cancel an open invitation, locate it in External Invitations, select Revoke and check the updated status before resending another access.
To remove the active monitoring evaluation, use Archive on the corresponding card. It remains legible and continues to consume capacity.
To permanently remove the evaluation and release capacity, open the record under Vendors, choose Archived in its Assessments section, select the delete icon at the top right of the correct card and confirm Delete archived evaluation?.

Expected result

The assessment appears in Vendor Assessments linked to the chosen vendor. The list allows you to track status, progress and maturity, and the detail offers the same cycle of responses, submission and completion of an assessment. The vendor page separates assessments into Active and Archived tabs. An archived assessment remains available for consultation; after definitive deletion, it no longer appears and frees up capacity.

Common problems

Situation	What to do
The screen informs that licensing is unavailable	The capacity could not be consulted. Try again before creating; this does not mean that there is available quantity.
The screen informs that assessments are not included in the license	The feature is not part of the current license. Do not try to treat this message as a simple temporary lack of quantity.
The screen informs that 100% of the assessments license has been used	The feature is included, but there is no remaining amount for a new evaluation. Consult GRC Licensing.
New evaluation is disabled without a license message	Confirm if there is an active organization and at least one active registered vendor. These items also determine eligibility.
The vendor does not appear in the selection	Check if the registration is active in the current organization.
There is no framework or method to choose from	Confirm if there are available options for the organization before creating the assessment.
New evaluation or the menu does not appear	Check your profile, the active organization, the associated invitations and the availability of the GRC module, in that order.
Delete is not available	Confirm that Archived has opened. An active review must be archived before permanent deletion.