What is Quick Answer?
Quick Answer provides recommendations to suppliers when they first join Risk Ledger, assisting them in setting up their profiles. It enables suppliers to use their previous security questionnaires and security documentation to create suggested answers to complete their business's security assessment. Suppliers can review relevant suggestions, modify them to suit each control, and see the supporting documents that could add relevant evidence.
What are the benefits of using Quick Answer?
The main benefits include: it's quicker to join Risk Ledger, build trust & share your security information with clients (we estimate roughly 3-4 hours to complete an assessment using Quick Answer); leverage previous work such as previous security questionnaires to get a head start documentations and questionnaires, increasing informational congruency; expediting the process to reach the approvals stage with your clients.
However, the intention isn’t for Quick Answer to replace or fully automate the completing of the assessment - we really encourage you to use it as a tool to speed your work up, but it is important to read through the suggestions generated and ensure they are relevant.
How do I use Quick Answer?
When you log into Risk Ledger for the first time, you’ll be prompted to choose between completing your assessment manually (Classic) or by using Quick Answer. Select "Use Quick Answer".
You'll then be guided through a three stage setup:
Step 1 being "Previous Questionnaires" where we'll prompt you to upload previous questionnaires and frameworks that your business has completed in the past (these include RFPs, SIG, CAIQ and ISO27001/SOC2 reports. Just drag and drop a file to the Upload field or click "Upload New".
Step 2 is the "Policies & Documents" section, where you can add any of your existing policy files or documents.
Examples of documents and policies to upload
Examples of documents and policies to upload
Incident Management Policies
Security Policies
Access Control Policies
Data Protection Policies
Business Continuity/Disaster Recovery Policies
Asset Management Policies
Insurance Policies
Remote Work Policies
Data Classification Policies
Other Internal Policies
Security Certifications
Audit and Testing Reports
Step 3 is where you'll answer a short set of scoping questions to determine which sections of the assessment framework are relevant to your organisation. This tailors the security profile to your needs, and you can update your answers later if needed.
Once you've gone through the above steps, you'll see a prompt that lets you know answers are being generated for your questions. The speed at which answers are generated depends on how many files and documents you've provided to be used by Quick Answer. On average, answer should be generated within 3-5 minutes.
Once suggestions are available, you can view them on the Assessment overview page:
You can choose to “Apply all suggestions” for a whole domain or go through each control individually to view and apply any suggestions:
Domain-applicable suggestions - applying a suggestion will apply the answer (Yes or No) and the answer notes. It doesn’t attach evidence.
Control-applicable suggestions - hovering over the “Suggested response available” box will display the available suggestion so you can make a decision on whether to apply the suggestion or not.
Can I use Quick Answer if I've already completed an Assessment or during a Reassessment?
Currently, Quick Answer is only available during the completion of an initial assessment, not reassessments. However, you can opt-in to use Quick Answer at any point during completion of your initial assessment.
💡 If there is anything we haven't covered, please feel free to contact us at support@riskledger.com or alternatively, select the Chat icon in the bottom right corner.