Where can I review detailed results?

Vendors will have immediate access to their Velocity Score, however only customers can see detailed dashboards about their security posture.

Who has access to my results?

Only customers that you approve will have access to your results. The Velocity team will have access to your results when you submit the results for verification.

How do I share my results with our customers?

Velocity offers an easy way to allow customers to view the completed assessment. Once a customer requests your assessment results you will receive a notification through email. Log into the Velocity portal, go to the Customers page, and approve the customer by selecting the plus box to move the requesting customer to the approved section.

What is the Vault?

The Vault is where your documentation is stored.

How do I submit my assessment for review?

First, you must complete the questionnaire.  You will need to answer all questions, add notes, and supporting documentation where requested. Here is a questionnaire that cannot be submitted because it is missing 15 answers and 1 document: Once you complete the assessment, click on “Submit for Review” on the questionnaire page.

How do I find the questions that I still need to answer?

You will need to complete the questionnaire if the overview page says that you have missing answers, notes or documents.  To quickly find the missing items: 1 – Go to Questionnaire: Go back into the questionnaire by selecting “Continue” 2 – Use Filter: Use the filter to select the missing items. Now you can complete the missing items.

How do I add a Product?

Vendors can add any number of products in Velocity to be assessed.  Each product will have their own assessment. 1 – Click Name:  In the upper right corner, click on your name. 2 – Manage Products:  Click on “Manage Products” 3 – Add Product: Click “Add Product” and complete the form. Your new product is added to the list and you can go to the Questionnaire to complete your assessment.

How do I switch my Product?

Vendors can switch between their active product to update or complete assessments. Now you can continue under the selected product.

What are acceptable documents during verification

Supporting documentation is needed during the data verification process. Some of the sections that companies have questions about are listed below with the type of documentation that is requested.

• Cybersecurity Awareness Training
  • Screenshot showing the online security awareness training courses.
  • Document showing employees have completed online security awareness training.
• Incident Response Plans
  • Incident Response Plans
  • Incident Response Policies
  • Incident Response Cover page and Table of Contents
• Penetration Test
  • Redacted Penetration Test Report
  • Penetration Test Executive Summary
  • Detailed Attestation Letter including methodology, scope, and overall risk sections. *If the solution is an application, please specify if authenticated testing was included in the penetration test.
• Risk Analysis
  • Latest Risk Analysis Report
  • Detailed Attestation Letter
• Business Continuity Plans
  • BCP Plans or Policy
  • Redacted BCP plans
  • BCP Plans Cover Page and Table of Contents
• Cyber Liability Insurance
  • Certificate of Insurance
  • Attestation letter showing Cyber liability coverage is in place.