All resources
Assessments7 min read

Designing vendor assessments that vendors actually complete

Assessment programs rarely fail on content. They fail because a 240-question spreadsheet lands in a shared inbox with a two-week deadline and no context, and the chase takes three months.

Tomas Lindqvist · Principal, ICT Risk

Scale the questionnaire to the criticality

One questionnaire for every provider is the fastest way to lose credibility. A standard provider of a non-critical tool does not need the same depth as the core banking platform. Use a short baseline set for standard providers and reserve the deep set for critical and important functions.

Conditional questions do most of the work: ask the branching question first and only reveal the follow-ups that apply.

Ask for evidence inline, not afterwards

If a question depends on a certificate, request the document on the same screen as the answer. Collecting answers first and evidence later doubles the number of rounds and leaves reviewers reconciling two sets of records.

Make the vendor side genuinely usable

Vendors respond faster when they can save progress, delegate sections to colleagues, see what remains and reuse documents they already provided. Automatic reminders on a sensible cadence remove almost all manual chasing.

  • Save and resume, with visible progress
  • Section-level delegation to subject matter experts
  • Reuse of previously accepted evidence
  • Scheduled reminders before and after the deadline

See how this works in the product.

See how one platform connects your ICT providers, assessments, evidence, contracts, risks and DORA Register.