This article contains the list of changes for the ProcessUnity GRX API V2 that have been released in 2024, as well as those changes that are planned for release in 2024.
Features Delivered
January 2024
Summary Level Assessment Scores
Added the ability to view an overall framework score and group scores on an assessment for a third party in your portfolio. Supports either Predictive or Attested Assessments.
Endpoint(s)
March 2024
Latest Questionnaire Visibility
Added the ability to see the latest questionnaire a Third Party worked on. This is especially useful when that questionnaire is In Progress to support the Initial Request OR when that questionnaire is In Progress during a Refresh. During those times the latest questionnaire will be different from the data available in exchange.
Endpoint(s)
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties/-company_id-
Impact Questionnaire
Ability to answer the Impact Questions and confirm how you do business with a third party and what the impact would be if that third party suffered an adverse event. See the answers provided and the AIR (auto impact responses). Updating these questions will trigger rescoring for Inherent Risk and Residual Risk on that third party.
Endpoint(s)
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties/-company_id-/impact-questionnaire
- https://api.cybergrx.com/#put-/v2/portfolio/third-parties/-company_id-/impact-questionnaire
- https://api.cybergrx.com/#get-/v2/collection/impact-questionnaire
April 2024
Assessment Report Spreadsheet
Ability to retrieve and view the assessment results for a third party in a spreadsheet view. Great if your users prefer a spreadsheet with the ability to easily filter data, over the raw data. Supports either Predictive or Attested Assessment Reports.
Endpoint(s)
- https://api.cybergrx.com/#post-/v2/reporting/exports
- https://api.cybergrx.com/#get-/v2/reporting/exports/-export_id-
- https://api.cybergrx.com/#get-/v2/reporting/exports/-export_id-/download
May 2024
Control Impact Added to Risk Navigator
The addition of the maximum impact value, driven by the Impact Questionnaire answers, and mapped to a control will be visible in the Risk Navigator endpoint. This value will enable users to prioritize the Findings that are relevant to how they do business with the Third Party.
Endpoint(s)
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties/-company_id-/risk-navigator/-framework_id-
June 2024
Third Party Risk Profile
A new endpoint paired with a new platform feature for customers to view the Inherent Risk, Residual Risk, and Risk Reduction on a Third Party in their portfolio. This will be the first introduction of 5 Band Inherent Risk Rating over the API. Predictive data calculations will be available to view, as well as Attested data calculations, if completed and authorized by the third party. This endpoint will also provide the dates for the Questionnaire Attestation and Validation Attestation that go along with the values displayed in the Risk Navigator endpoint.
Endpoint(s)
5 Band Inherent Risk and Dynamic Scoring
The move from 3 to 5 Band Inherent Risk has been introduced to the pre-existing endpoints. Behind the scenes, customers will also be getting the value of a more dynamic scoring engine that triggers updates to Inherent and Residuals risk in a near real-time manner as soon as inputs are received that might change those scores. However, the above Risk Profile endpoint is the recommended one for IR/RR values as it has additional fields such as the date the IR/RR was last recalculated as well as the questionnaire and validation dates for the assessment currently available to pull over the api.
Endpoint(s)
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties/-company_id-
Features In Plan
The below section reflects the current roadmap plan. Dates are estimates. Both features and target dates are subject to change.
Q4 2024
Scoring Display Fix
The following endpoints had some scores that were displayed with up to 5 decimal places. Our standard is no more than 2 decimal places for scores.
Endpoint(s)
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties/-company_id-/risk-profile
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties/-company_id-/risk-navigator/-framework_id-
Metric Questions and Answers in Risk Navigator
When viewing an Attested Assessment for a Third Party, customers will be able to see the metric level questions and answers if they were completed and authorized. This is only available for Attested Assessments. Predictive Assessments are at the Control question level only.
Endpoint(s)
- https://api.cybergrx.com/#get-/v2/portfolio/third-parties/-company_id-/risk-navigator/-framework_id-
Q1 2025
Summary Level Assessment Findings
View a count of High, Medium and Low Findings at a framework level and group level for a third party in your portfolio. Supports either Predictive or Attested Assessments. Useful when creating custom reports or values to display to business stakeholders.
Endpoint(s)
Comments
0 comments
Article is closed for comments.