How can I use Auto-suggest to help me complete my assessment?

Auto-suggest provides recommendations to suppliers when they first join Risk Ledger, assisting them in setting up their profiles. It enables suppliers to use their previous security questionnaires and security documentation to create suggested answers to complete their business's security assessment. Suppliers can review relevant suggestions, modify them to suit each control, and see the supporting documents that could add relevant evidence.

The main benefits include: it's quicker to join Risk Ledger, build trust & share your security information with clients (we estimate roughly 3-4 hours to complete an assessment using Auto-suggest); leverage previous work such as previous security questionnaires, documentations and questionnaires to get a head start; increasing informational congruence; expediting the process to reach the approvals stage with your clients.

However, the intention isn’t for Auto-suggest to replace or fully automate the completion of the assessment - we really encourage you to use it as a tool to speed your work up, but it is important to read through the suggestions generated and ensure they are relevant.

When you log into Risk Ledger to complete your initial assessment, navigate to the Getting Started page from the left sidebar:

Once here, you’ll be presented with some Scoping Questions. Try and answer these as accurately as possible, otherwise you can skip them for the time being:

You’ll then be prompted to try out Auto-suggest - click “Try it out” to move forward with Auto-suggest:

You’ll then be presented with the Auto-suggest menu on the right of the screen where you can upload any relevant documents and/or policies that you’d like to be used to help generate answer suggestions:

You can drag-and-drop documents or click the “Upload” button to select files directly. Once you’ve done this, click the “Suggest answers” button at the bottom of the menu:

After this, you’ll see a prompt that shows that Auto-suggest is “scanning your documents to find suggestions”. This typically takes a few minutes and you can begin answering assessment questions in the meantime:

Once your answer suggestions are ready, the Auto-suggest banner will tell you how many are available. Click the “Apply all suggestions” button to proceed:

You can also see specifically which domains have had answer suggestions added and choose to apply them at the domain or control level:

Domain-applicable suggestions - applying a suggestion will apply the answer (Yes or No) and the answer notes. It doesn’t attach evidence.

Control-applicable suggestions - hovering over the “Suggested response available” box will display the available suggestion so you can make a decision on whether to apply the suggestion or not.

You can use Auto-suggest up to 5 times to generate answers for your assessment. To re-use Auto-suggest, please re-add documents as per the previous steps to regenerate answer suggestions.

If you hit the 5 regenerations limit, you’ll see the following pop-up in the document upload window:

If you chose to skip using Auto-suggest but later changed your mind, just navigate back to your Security Profile from the left sidebar and click “Auto-suggest” either at the top right of the page or in the banner above ‘Organisation details’. You can then go through the process as outlined above:

Currently, Auto-suggest is only available during the completion of an initial assessment, not reassessments. However, you can opt-in to use Auto-suggest at any point during completion of your initial assessment, as outlined above.