Tracking changes between assessments

Overview

Pending Changes highlight updates that occur between vendor risk assessments. These changes indicate where your latest vendor information may be out of sync with the most recent assessment summary, control coverage metrics, or calculated risk.

Rather than requiring immediate action, Pending Changes signal that new or updated information exists and will be incorporated during the next assessment update.

What Triggers Pending Changes

Pending Changes are generated when new information is identified that is not yet reflected in the current assessment. This includes:

1. Controls were added to or removed from assessment scope

• Typically caused by:
  • Changes in relationship context
  • Updates to the underlying control mapping
• Potential impact:
  • Changes in control coverage metrics
  • Shifts in inherent or residual risk calculations
  • Assessment summary longer reflects the current scope

2. Artifacts were discovered via public search

• Potential impact:
  • Control coverage may be higher than represented in the assessment summary
  • Residual risk may be lower than represented in the assessment summary

3. Artifacts were removed from the relationship

• Potential impact:
  • Control coverage may be lower than represented in the assessment summary
  • Residual risk may be higher than represented in the assessment summary

4. Artifacts have expired

Applies when artifacts expire and automatic artifact updates are not enabled

• Potential impact:
  • Expired artifacts receive lower assurance, which may impact residual risk scoring

5. Risk Advisories were discovered

• Potential impact:
  • Assessment summary does not reflect the latest risk advisories

How Pending Changes Are Resolved

Pending Changes are automatically cleared when the next assessment update begins.

To quickly incorporate updates, you can initiate a Public Search Assessment

• Ensure that publicly available data is up to date
• Updates assessment summaries, control coverage, and risk metrics

Where to Find Pending Changes

• The list of Pending Changes will appear on a relationship with a completed assessment, above the assessment summary
• Relationships with Pending Changes are marked with a small blue badge on the Relationship List page

Filtering

To view all affected relationships:

1. Go to Relationship List
2. Select More Filters
3. Enable Has Pending Changes
4. Apply filters

Bulk Update Tip

To efficiently update multiple relationships:

1. Filter for relationships with Pending Changes
2. Select all results
3. Run a Public Search Assessment

This allows you to refresh all pending updates in a single action.