<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=691116991096043&amp;ev=PageView&amp;noscript=1">
Skip to content
  • There are no suggestions because the search field is empty.

🛠 Create Your Own - Market IQ Monitoring & Escalation Workflow

Create a workflow for the autonomous risk monitoring of your vendors.

Estimated Read Time: 13 Minutes

Requires Market IQ Advanced


Sections in this article:



Introduction

This workflow automates monitoring your vendors for any financial or cybersecurity risks. Once you have connected a vendor to one of our Market IQ modules,  the workflow uses the live data to trigger reviews when risk scores change.

Workflow Diagram

MarketIQ finance escalation process diagram — click to view full size

 


Mandatory Configuration

The steps in this section outline the essential setup required to make your workflow fully functional:

  • Add the Market IQ Escalation workflow template to your tenant as the starting point for the build
  • Configure the triggers that pull vendors onto the workflow when their risk scores change
  • Create workflow groups and assign them as phase owners, then amend the email notifications so they suit your process
  • Add the Market IQ data to the workflow form, and review the questionnaires used to capture feedback and decisions

See the Additional Configuration section for optional additions to expand the scope of your process or tailor the workflow to better align with your organisation’s policies and procedures.

Add the Template

To get started, you'll need to add the template workflow:

  1. From the navigation menu, click Workflows.
  2. Click Add, then select Workflow Template.
  3. Click Create on the 📉 Market IQ Escalation 📈 template.
  4. Amend the title if needed, then click Create.

Configure the Trigger/s

Next, configure the triggers to set the conditions for when vendors are pulled onto the workflow:

  1. From the navigation menu, click Workflows.
  2. Expand the 3 dots on the relevant workflow, then select Workflow Triggers.
  3. Click Add Trigger.
  4. Enter a name, then click Create.
  5. To set your workflow trigger conditions, click + Add.
  6. Select the field that will trigger the workflow, then select the operator and value.
  7. Click Create. Repeat these steps if the trigger requires multiple conditions.
    credit rating trigger

 For Market IQ Financial, it's recommended to build a trigger with the following conditions:

Field

Operator

Data Value

Vendor / Market IQ | Financial / Credit Rating / Trending n/a Down
Vendor / Market IQ | Financial / Credit Rating one of C, D, E
Vendor / Status one of Pipeline, Live

For Market IQ Cyber, it's recommended to build a trigger with the following conditions:

Field

Operator

Data Value

Vendor / Market IQ | Cyber / Security Grade / Trending n/a Down
Vendor / Market IQ | Cyber / Security Score less than 75
Vendor / Status one of Pipeline, Live

Note: Each individual trigger operates with AND logic, so the Financial and Cyber examples above must be configured as separate triggers.

You can also add triggers that are specific to certain vendor types. For example, vendors marked as critical can be held to a higher standard, so their threshold for entering the review workflow is lower than for other vendors:

Field

Operator

Data Value

Vendor Type one of Critical
Vendor / Market IQ | Cyber / Security Grade n/a Trending Down
Vendor / Market IQ | Cyber / Security Score less than 85
Vendor / Status one of Pipeline, Live

Create Workflow Groups

Workflow groups can be used in this workflow to:

  • Grant access to groups of users to review risks and make decisions
  • Send notifications to groups of users

For example, you may require groups such as a Vendor Management Team, an InfoSec Team for Market IQ Cyber, or a Finance Team for Market IQ Financial. If you haven’t already created workflow groups in your tenant, see Manage Workflow Groups for step-by-step instructions on creating groups and adding users.

Assign Phase Owners

Several phases in this workflow cover the review and monitoring of vendor risk. The following don’t have an owner configured, so you’ll need to assign one for each, based on how responsibility is normally assigned in your organisation. This could be a workflow group, a team or an individual user.

Phase Description
Vendor & Risk Management Review The owner reviews the risk flagged by the Market IQ data, and decides whether to accept it, keep monitoring or offboard the vendor.
Holding Phase | Monitoring The owner is notified after a month has passed, and reviews the risk flagged by the Market IQ data again, and decides whether to accept it or offboard the vendor.
Offboard Vendor

The owner updates the vendor record if the risk is too high to continue the relationship.

 To assign owners:

  1. Click on a phase where the owner needs configuring to edit it.
  2. From Form Access, select the relevant radio button to determine how ownership is assigned.
  3. Repeat these steps until owners have been assigned for all the phases outlined above.

Note: The Internal Vendor Manager Review phase is already configured to be owned by the Internal Vendor Owner, with a backup owner being the Card Creator.

Amend Email Notifications

The template is designed for monitoring vendor risks from the Market IQ Financial or Market IQ Cyber data. Therefore, you should adapt the notification emails so the phase owners receive the relevant details.

  1. Click the phase where you want to edit the notification content.
  2. From Notifications, click the pencil icon for the Email Template for any of the enabled notifications.
  3. Delete the tag that doesn’t apply to your workflow, along with the word OR, from the line below:
    1. {{ market_iq_financial.summary }}  OR  {{ market_iq_cyber.summary }}
  4. Add any other context your review process needs, then click Update.

Add the Market IQ Metadata to the Form

Next, add the Market IQ data to the workflow form:

    1. Click the start phase to edit it.
    2. From Form, click Add Section.
    3. Enter a Name e.g. Market IQ Financial Data.
    4. Select the following from the dropdown lists:
      1. Predefined: Vendor
      2. Custom Data Group: Market IQ  | Financial or Market IQ  | Cyber as required.
    5. Click Save.

    If required, click Reorder to drag and drop the new section to a different position in the form:

    Note: Once you added, this form section will be Read Only by default on all phases. If required, you can change it to Hidden for phases where the Market IQ values shouldn't be shown to users (e.g. on the Vendor Portal phase). See Form Visibility for further details.

    Configure the Form Questionnaires

    By default, the workflow has three form sections, designed to capture context, feedback and decisions from users during the review process. 

    Expand each section to learn more:

    Vendor Owner Questionnaire

    Purpose: Capturing feedback from the Internal Vendor Manager. The pre-existing [Yes/No] field allows them to escalate this review form to the vendor for more details.

    Suggested Additions:

    • How important/healthy is our relationship with this vendor? [Multiline freetext]
    • How important is the service they provide to us? [Multiline freetext]
    • What is your desired outcome if the issue/risk is too large for us to accept? [Multiline freetext]

     

    Vendor Portal Questionnaire

    Purpose: Capture feedback directly from the vendor being assessed. This gives them the opportunity to provide additional context or reassurance about the new risk.

    Suggested/Example Additions:

    • Were you aware of this recent incident? [Yes/No]
    • Is there any context about the risk we should know? [Multiline text]
    • What policies/procedures were in place to mitigate this issue? [Multiline text]
    • What steps are being taken to mitigate/remedy this issue? [Multiline text]
    • What steps are being taken to prevent a re-occurrence? [Multiline text]

     

    Internal Decision

    Purpose: Capture the actions from the main vendor/risk management decision makers.

    Suggested/Example Additions:

    • Notes (if vendor will be off-boarded) [Multiline text]
    • Notes on reasons the risk can be accepted [Multiline text]
    • BCP/Risk Planning Document [Attached file]

     

    To edit the questionnaires:

    1. Click on the start phase of the workflow to edit it. 
    2. From Form, navigate to the section you wish to amend:
      1. Click Add Field to include additional questions in the form.
      2. Expand the 3 dots on a field, then click the pencil icon or delete icon to amend existing fields.

    Additional Configuration

    This section covers optional steps to adjust the workflow’s scope or default settings, helping you tailor it to your organisation’s needs.

    Remove the Vendor Portal Review

    The workflow template includes an option to involve vendors in the review process when a risk arises, so you can get their input before taking action. If your organisation does not use the Vendor Portal, you can remove this step to make the workflow internal only.

    Part 1: Remove Transitions Pointing to the Vendor Review Phase
    1. Click the Internal Vendor Manager Review phase to edit it.
    2. From Transitions, click the delete icon on the Submit | Escalate to Vendor transition.

    Delete transition

    Part 2: Remove the Associated Form Questionnaire
    1. While still on the Internal Vendor Manager Review phase, navigate to Form.
    2. Click the delete icon on the Vendor Portal Questionnaire form section, then click Delete to confirm.
    3. In the Vendor Owner Questionnaire section, delete the fields for Context and Should we escalate...?.
      delete VP fields

    Part 3: Archive the Phase

    Click the Vendor Review phase, then click Delete.

    delete VP phase

    Additional Setup Outside the Workflow

    If you’ve followed all of the steps above, your workflow is nearly ready to launch. To help the process run smoothly and reliably, there are a few additional areas of your tenant worth reviewing.

    Connect Vendors to Market IQ

    Vendors cannot be monitored for risk reviews via this workflow if they are not connected to Market IQ.

    Connect a Vendor to Market IQ Financial
    1. Navigate to the relevant vendor record, then click the Market IQ tab.
    2. From the Market IQ Financial section, click Connect.
      MIQ Financial connect-1
    3. Enter the details for the vendor, then click Find. If no results are found, ensure the vendor details are correct and search again. 
      MIQ financial find
    4. Review the company name and information from the list of results, then click Apply. A confidence score is returned in the case of multiple results.
      apply MIQ Financial-1

     

    Connect a Vendor to Market IQ Cyber

    To connect a vendor to Market IQ Cyber, ensure the Website field is populated on the vendor record. The vendor is then connected automatically.

    Note: To ensure new vendors are connected, it's recommended to build this into your vendor onboarding process. If you don’t have one, see Create Your Own - Vendor Onboarding Workflow.

    Populate Internal Vendor Owners

    This workflow process works best if the appropriate internal owner is assigned to a vendor record, so they can be notified that one of their relationships is showing a new risk. Therefore, it's recommended to ensure that vendor records have an internal owner assigned:

    1. Open the vendor record.
    2. Click Edit and navigate to the Owners section.
    3. Select the relevant user from the dropdown list then click Save & Exit.

    Note: If multiple vendors need to be assigned owners, it's recommended to use bulk import to do this efficiently.

    Add Vendor Users

    If you’re using the Vendor Portal to request input from vendors, check that each vendor has at least one activated Vendor Portal user.

    1. Open the vendor record.
    2. Click Add then select Vendor User to add a new contact.

    Note: To invite them to the Vendor Portal straight away, select the Invite into Gatekeeper checkbox before clicking Save. Otherwise, the workflow invites them automatically if a card lands on the Vendor Review phase.

    You can also see a full list of vendor users in your tenant and bulk import users:

    1. From the navigation menu, expand Settings then click Users.
    2. Click the Vendor Users tab.

    vendor users list-1

    ⚡️Getting Started⚡️- Activate the Trigger

    Once your workflow is fully configured, simply activate the triggers to make it live:

    1. From the navigation menu, click Workflows.
    2. Expand the 3 dots on the relevant workflow, then select Workflow Triggers.
    3. Click to open the trigger.

    4. Click the  pencil icon on Trigger Status.
    5. Select Live from the dropdown list, then click Update.
    6. Repeat steps 3-5 for all triggers.

    Any vendors connected to Market IQ now automatically begin the risk review process when their scores drop in line with your trigger conditions.

    Additional Reading 📚

    • Market IQ Financial - Learn about the data available within our CreditSafe integration module
    • Market IQ Cyber - Learn about the data available within our Security Scorecard integration module
    • ⚡️Vendor Portal Expert - Invitation Emails - Review how to set clear expectations with vendor users from the outset and operate with transparency in all your new relationships
    • ⚡️Testing Triggered Workflows - Learn how to manually trigger test cards for this workflow to test out the process before switching on the real triggers