← Get Audit Ready

<aside> ⚖️

Review and close your risks, and confirm your vendors are assessed. This is one of the final steps before your audit. Work through the Risks tab, then the Vendors tab, as below.

</aside>

Risks

Open the Risks tab. For each risk in the list:

1. Open the risk and read its details.
2. Check the treatment plan - confirm how you are handling it (for example accept, mitigate, transfer, or avoid) is in place and appropriate.
3. Review the risk matrix - check the likelihood and impact scoring looks right for your business.
4. Set the status to Closed once you are happy the risk is handled or formally accepted.

Repeat for every risk. An auditor wants to see that each risk has been considered, has a treatment plan, and has an owner-approved status - not left open and untouched.

Vendors

Open the Vendors tab and check that every vendor shows as suitably assessed - each has been reviewed with the right risk level and supporting documentation against it. Follow up on any vendor that is missing an assessment.

<aside> ✅

You are done when: every risk has a treatment plan and a reviewed status (Closed or formally accepted), and every vendor is assessed.

</aside>