6 Month Reassessments
After you have submitted your initial assessment, your organisation will receive email notifications from Risk Ledger asking you to complete a reassessment every 6 months. This is to ensure that the information in your security profile is always kept up to date. Reassessments are not a request to redo the entire assessment but to ensure all current information is verified and updated where necessary.
A reassessment involves updating your responses, adding evidence and contextual information to reflect any updates in the security controls your organisation has in place. Additionally, any newly added or updated questions must be answered during the reassessment.
All the information in your profile is saved from your last assessment, so a reassessment is much quicker to complete.
💡 Please note: if your organisation has not changed how a control is implemented, you do not need to do anything except confirm the information you have shared is still correct.
Completing your reassessment every 6 months means the clients you're connected to in Risk Ledger will not have to ask you to do additional work when they periodically review your security profile. Reassessments are not tied to a specific client; instead, they are accessible to all authorised client connections.
The Assessment page displays the date of your upcoming reassessment and when your last assessment was submitted.
Overdue Reassessments
If your reassessment is overdue, the reassessment date will appear in red. Your connected clients can view the date of your reassessment and will be able to see that it is overdue. Additionally, newly added or modified questions in your questionnaire must be addressed during your reassessment. If you prefer, you can manage reminders for such updates via Settings > My Notifications.
Completing your Reassessment
Click the green Let's get Started button to begin your reassessment.
You will be taken into the reassessment wizard. Click on the Begin button of a section to update your information.
During the reassessment you do not need to answer all of the controls again. For any controls that have not changed, click the Confirm button on the right hand side of the control.
You can confirm a full section at once by clicking the Confirm Domain button in the bottom right hand corner of your web page.
If there has been a change to the controls your organisation has in place, update the relevant control, add evidence and update the notes. Make sure to update any certifications that have expired.
To help you complete the reassessment you can:
Filter the questionnaire by unconfirmed / confirmed control questions
Bookmark questions to save these for further review
View the number of confirmed domains
Regularly update your Risk Ledger profile to avoid significant changes during reassessments
Maintain open communication with your team to effectively coordinate updates to assessment responses
If you need help from colleagues to complete your reassessment, admin level users are able to add as many colleagues as they require to collaborate in completing the answers.
When you have finished completing the updates, click Submit Reassessment to finalise. This can be found in the bottom right corner of your web page within the reassessment wizard or on the Assessment page.
💡 If there is anything we haven't covered, please feel free to contact us at support@riskledger.com or alternatively, select the Chat icon in the bottom right corner.