🛠 Create Your Own - MarketIQ Monitoring & Escalation Workflow
Create a workflow for the autonomous risk monitoring of your vendors.
Estimated Read Time: 13 Minutes
Estimated Configuration Time: 30 - 55 Minutes
Requires Market IQ
Sections in this article:
- Introduction
- Mandatory Configuration
- 🛠 Additional Configuration 🛠
- Additional Setup Outside the Workflow
- ⚡️Getting Started⚡️ - Activate the Trigger
- Additional Reading
Note: If you only have Market IQ Lite and want to learn more about Market IQ Advanced features, please contact your Customer Success Manager or reach out to our Customer Success Team to discuss upgrading.
Introduction
This workflow automates monitoring your vendors for any financial or cybersecurity risks.
Once you have connected a vendor to one of our Market IQ modules, the workflow uses the live data to trigger reviews when risk scores change.
Mandatory Configuration
The steps in this section outline the essential setup required to make your workflow fully functional.
The ⬇️ Additional Configuration ⬇️ section covers optional additions to expand the scope of your process or tailor the workflow to better align with your organisation’s unique policies, procedures, and Gatekeeper subscription features.
Add the Template
To get started, you'll need to add the template workflow:
- From the navigation menu, click Workflows.
- Click Add, then select Workflow Template.
- Click Create on the 📉 Market IQ Escalation 📈 template.
- Amend the title if needed, then click Create.
Configure the Trigger/s
You'll need to configure the triggers to set the conditions for when vendors will be triggered onto the workflow:
- From the navigation menu, click Workflows.
- Expand the 3 dots on the relevant workflow, then select Workflow Triggers.
- Click ➕ ADD TRIGGER
- Enter a name, then click Create.
- To set your workflow trigger conditions, click + ADD.
- Select the field that will trigger the workflow, then select the operator and value.
- Click Create. Repeat these steps if the trigger requires multiple conditions.
For Market IQ Financial, it's recommended to build a trigger with the following conditions:
Field |
Operator |
Data Value |
Vendor / Market IQ | Financial / Credit Rating / Trending | n/a | Down |
Vendor / Market IQ | Financial / Credit Rating | one of | C, D, E |
Vendor / Status | one of | Pipeline, Live |
For Market IQ Cyber, it's recommended to build a trigger with the following conditions:
Field |
Operator |
Data Value |
Vendor / Market IQ | Cyber / Security Grade / Trending | n/a | Down |
Vendor / Market IQ | Cyber / Security Score | less than | 75 |
Vendor / Status | one of | Pipeline, Live |
Note: Each individual trigger operates with AND logic, so the examples above must be configured separately.
You can also add triggers that are specific to certain vendor types, for example you could set up an additional trigger such as:
Field |
Operator |
Data Value |
Vendor Type | one of | Critical |
Vendor / Market IQ | Cyber / Security Grade | n/a | Trending Down |
Vendor / Market IQ | Cyber / Security Score | less than | 85 |
Vendor / Status | one of | Pipeline, Live |
In this example, vendors marked as critical are held to a higher standard, so their threshold for entering the review workflow is lower than for other vendors.
Create Workflow Group/s
Next, you'll need to create a workflow group for users responsible for reviewing vendors. For this workflow, it's recommended to create a centralised Risk/Vendor Management team, and if required:
- For Market IQ Cyber: An InfoSec Team
- For Market IQ Finance: A Finance Team
- From the navigation menu, expand Settings then click Users.
- Click Add then select Workflow Group.
- Enter a title and, if useful, an optional description, then click Save.
- Expand the 3 dots on the newly created group, then select Edit.
- Click Add Member.
- Select the user from the dropdown list then click Save.
- Repeat steps 5-6 until all group members have been added.
Assign Phase Owners
Now that the workflow groups have been set up, you'll need to assign them as phase owners.
- Click the Vendor & Risk Management Review phase to edit it.
- From Form Access, select the radio button for the responsible users/groups. This could be your Vendor Management Team and/or the specific team responsible for the risk (e.g. InfoSec for Market IQ Cyber or Finance for Market IQ Financial).
- Repeat these steps for the following phases:
- Holding Phase | Monitoring
- Offboard Vendor
Note: The Internal Vendor Manager Review phase is already configured to be owned by the Internal Vendor Owner, with a backup owner being the Card Creator.
Amend Email Notifications
The template is designed for monitoring vendor risks from the Market IQ Financial or Market IQ Cyber data. Therefore, you'll need to adapt the notification emails to ensure the phase owners have the relevant details.
- Click on the phase where you want to edit the notification content.
- From Notifications, click the
pencil icon for the Email Template for any of the enabled notifications.
- Delete the tag and the word OR from the line below if it doesn’t apply to your workflow:
- {{ market_iq_financial.summary }} OR {{ market_iq_cyber.summary }}
- Add any other context as necessary for your review process, then click Update.
Add the Market IQ Metadata to the Form
Next, you need to add the Market IQ data to the workflow form:
- Click the start phase to edit it.
- From Form, click ADD SECTION.
- Enter a Name e.g. Market IQ Financial Data.
- Select the following from the dropdown lists:
- Predefined: Vendor
- Custom Data Group: Market IQ | Financial
- Click Save.
If required, click REORDER to drag and drop the new section to a different position in the form:
Note: Once you added, this form section will be Read Only by default on all phases. If required, you can change it to Hidden for phases where the Market IQ values shouldn't be shown to users (e.g. on the Vendor Portal phase).
Configure the Form Questionnaires
There are three custom Form Sections in the workflow. These are designed to capture context, feedback, or decisions from users during the review process.
Expand each section to learn more:
Vendor Owner Questionnaire
Purpose: Capturing feedback from the Internal Vendor Manager. The pre-existing [Yes/No] field allows them to escalate this review form to the vendor for more details.
Suggested Additions:
- How important/healthy is our relationship with this vendor? [Multiline freetext]
- How important is the service they provide to us? [Multiline freetext]
- What is your desired outcome if the issue/risk is too large for us to accept? [Multiline freetext]
Vendor Portal Questionnaire
Purpose: Capture feedback directly from the vendor being assessed. This gives them the opportunity to provide additional context or reassurance about the new risk.
Suggested/Example Additions:
- Were you aware of this recent incident? [Yes/No]
- Is there any context about the risk we should know? [Multiline text]
- What policies/procedures were in place to mitigate this issue? [Multiline text]
- What steps are being taken to mitigate/remedy this issue? [Multiline text]
- What steps are being taken to prevent a re-occurrence? [Multiline text]
Internal Decision
Purpose: Capture the actions from the main vendor/risk management decision makers.
Suggested/Example Additions:
- Notes (if vendor will be off-boarded) [Multiline text]
- Notes on reasons the risk can be accepted [Multiline text]
- BCP/Risk Planning Document [Attached file]
To edit the questionnaires:
- Click on the start phase of the workflow to edit it.
- From Form, within the Section you wish to amend:
- Click ➕ ADD FIELD to include additional questions in the form.
- Expand the 3 dots on a field, then click the
pencil icon or
delete icon to amend existing fields.
🛠 Additional Configuration 🛠
This section covers optional steps to adjust the workflow’s scope or default settings, helping you tailor it to your organisation’s needs.
Remove the Vendor Portal Review
The workflow template includes an option to involve vendors in the review process when a risk arises, to get their input before taking action.
However, if your Gatekeeper subscription does not include the Vendor Portal, you can remove this step to make the workflow internal-only.
Part 1 - Remove Transitions Pointing to the Vendor Review Phase
- Click the Internal Vendor Manager Review phase to edit it.
- From Transitions, click the
delete icon on the Submit | Escalate to Vendor transition.
Part 2 - Remove the Associated Form Questionnaire
- While still on the Internal Vendor Manager Review phase, navigate to Form.
- Click the
delete icon on the VENDOR PORTAL QUESTIONNAIRE form section, then click Delete to confirm.
- In the VENDOR OWNER QUESTIONNAIRE section, delete the fields for Context and Should we escalate...?.
Part 3 - Archive the Phase
Click the Vendor Review phase, then click Delete.
Additional Setup Outside the Workflow
If you’ve followed all of the steps above, your workflow is nearly ready to launch. However, to help the process run as smoothly and reliably as possible, there are a few additional areas of your Gatekeeper tenant worth reviewing.
Connect Vendors to Market IQ
Vendors cannot be monitored for risk reviews via this workflow if they are not connected to Market IQ.
Connect a Vendor to Market IQ Financial
- Navigate to the relevant vendor record, then click the Market IQ tab.
- From the Market IQ Financial section, click Connect.
- Enter the details for the vendor, then click Find. If no results are found, ensure the vendor details are correct and search again.
- Review the Company Name and information from the list of results, then click Apply. A confidence score is returned in the case of multiple results.
Connect a Vendor to Market IQ Cyber
To connect a vendor to Market IQ Cyber, you need to ensure the Website field is populated for the vendors you wish to monitor. This will connect them automatically.
Note: To ensure new vendors are connected, it's recommended to embed this within your vendor onboarding process. If you do not have one, see 📖 Create Your Own - Vendor Onboarding Workflow
Populate Internal Vendor Managers
The first phase of this workflow works best if the appropriate Vendor Manager is assigned and notified that one of their relationships is showing a new risk. Therefore, it's recommended to ensure that vendor records have an internal owner assigned.
- Open a vendor record which has no internal owner.
- Click Edit and navigate to the Owners section.
- Select the relevant user from the internal manager dropdown then click Save & Exit.
Note: If multiple vendors need to be assigned owners, it's recommended to use bulk update to do this efficiently.
Add Vendor Users
If you are using the Vendor Portal to request input from vendors, you should check that vendors have at least one activated Vendor Portal user.
- Open a vendor record which has no vendor users.
- Click Add then select Vendor User to add a new contact.
Note: If you want to invite them to the Vendor Portal straight away, you can select the Invite into Gatekeeper checkbox before clicking Save. Otherwise, the workflow will automatically invite them into Gatekeeper if a card lands on the Vendor Review phase.
You can also see a full list of all vendor users in your tenant, and bulk import users:
- From the navigation menu, expand Settings then click Users.
- Click the Vendor Users tab.
⚡️Getting Started⚡️- Activate the Trigger
Once your workflow is fully configured, simply activate the triggers to make it live:
- From the navigation menu, click Workflows.
- Expand the 3 dots on the relevant workflow, then select Workflow Triggers.
-
Click to open the trigger.
- Click the
pencil icon on Trigger Status.
- Select Live from the dropdown list, then click Update.
- Repeat steps 3-5 for all triggers.
Any vendors connected to Market IQ will automatically begin the risk review process when there is a drop in their scores in line with your trigger conditions.
Additional Reading 📚
- Market IQ Financial - Learn about the data available within our
CreditSafe integration module
- Market IQ Cyber - Learn about the data available within our
Security Scorecard integration module
- ⚡️Vendor Portal Expert - Invitation Emails - Review how to set clear expectations with vendor users from the outset and operate with transparency in all your new relationships
- ⚡️Testing Triggered Workflows - Learn how to manually trigger test cards for this workflow to test out the process before switching on the real triggers.