This article will outline the process of sharing and guide users on where to track the progress of their shares. This article will also address commonly asked questions about sharing. Here is a video walkthrough of how to share your assessment: Sharing Process
Benefits of sharing
- Members can share with customers both a part of AND not yet a part of the Exchange
- It is free to share AND free to receive
- We offer a Framework Mapper tool that allows the recipient to translate the ProcessUnity GRX assessment shared with them into 60+ industry standards to suit their preferences (NIST, CAIQ Lite...)
- We offer a session to the recipient to be walked through the process to save you time
Leveraging your completed assessment by proactively sharing it in response to more customer questionnaire requests is a great way to save hundreds of hours of time and frustration at no cost.
Sharing steps
Communicate:
1. We've found better acceptance when our members provide their recipients communication that they will be getting an invitation email from ProcessUnity GRX to view, that they'll be able to view within 60+ industry standard frameworks, and that it is free for them to receive.
Fill out and submit the share form:
1. Log in at https://portal.cybergrx.com/login
2. Go to your Customer Portfolio by clicking the icon in the left hand panel which will bring you to your Request/Shares tab of the Customer Portfolio
3. If the company you wish to share with is not yet a part of the portfolio, click Add Company. Once the company is added you can select share data or use the Share icon () to open the Share Form.
4. If the customer you wish to share with is already in your portfolio table, click the Share icon () to open the Share Form.
5. At the top of the form you will see the information of the company you are trying to share with. Review this, to confirm you are sharing to the correct organization.
6. Select the assessment scope you would like to share. You'll have four assessment scope options to choose from. The first three of these options are curated groupings we've developed to help you align your request with the most relevant level of data needed by your organization. The fourth Advanced option allows you to select from a range of established industry-standard security frameworks to tailor the assessment to your specific needs:
- Essential - 60 ProcessUnity Critical Cyber Risk Questionnaire. Focuses on the most essential controls necessary for standard security hygiene.
- Core - 209 ProcessUnity Cyber Risk Questionnaire (Most commonly shared assessment. Commonly paired with a validation share). Cover the full set of all cybersecurity control questions to provide broad insight into a third party's risk posture.
- Core Plus - 209 ProcessUnity Cyber Risk Questionnaire with 627 metrics. Includes performance metrics for each control to support deeper analysis and regulatory requirements.
- Advanced - Select an alternate framework from the drop down list of 60+ different frameworks by either typing in the box to help search or use the carrot to open the drop down list of frameworks.
7. Check the Validation Share if you would like to share your organization's validation results with your customer. Note: Validation is only available for the ProcessUnity suggested frameworks.
8. Check the Document Share (all documents) check box IF you would like to do a document share and grant access to ALL evidence documents uploaded on the platform. Allows customers to access all uploaded documents for 28 days.
9. Add a new recipient by clicking Add Recipient and/or select a contact or two from the registered users or the previous recipients listed. It is always highly recommended to include a recipient who is registered, if available. Note: The form will show up to 5 registered users, if available, with the account administrator or third party portfolio manager role.
Tip: Our system will NOT process shares to and from the same company and shares that come from personal emails (gmail, yahoo, etc.). Our system will only recognize legitimate business emails.
10. Click Submit Share and this will prompt a confirmation window to pop-up. You can review the information you filled out and confirm it is correct by clicking Submit Share or if you need to update the information you can click Keep Editing. Tip: A ‘Share Sent Successfully’ window will pop-up confirming your share has been submitted. As the sharer, you, and anyone selected on the recipients list will receive notifications about the share.
Tracking:
1. Return to your Request/Shares tab of the Customer Portfolio. Review the Status column for the share you are tracking. It will be in one of three different statuses:
- Pending: Sent and awaiting the customer’s acceptance of the report share invitation.
- Delivered: The customer has accepted the report share invitation.
- Archived: Delivered but a new share has replaced the previous share. However, you still have access to the archived report.
2. Click the Drawer icon to view additional details of the share and the share progress.
Do you still have questions about the platform's sharing capability?:
Please feel free to schedule a report and sharing overview here: https://outreach.cybergrx.com/c/Mike_Reedy