Skip to main content
For AI agents: a documentation index is available at https://docs.coverbase.com/llms.txt. This page is also available in markdown by appending .md to the URL.
This guide is part of the User Guides collection. It covers the Before a Reassessment Starts setting under Configuration → Assessment Settings and the Inherent Risk Check card on an assessment. It sits beside Running an assessment and IRQ Library. For the plans and cadence it builds on, see Admin setup.
A reassessment usually starts from the vendor’s inherent risk as it was last time. When the relationship has changed (new data, new access, a new use), the vendor gets last year’s questionnaires. The inherent risk check closes that gap: before anything goes to the vendor, the relationship owner re-answers your IRQ, prefilled with the answers you approved last cycle. The plan then picks questionnaires and control sets from the refreshed inherent risk. The mistake people make most often is expecting the check on every assessment. It runs only on reassessments created from a plan that has it turned on: the scheduled reassessment, a Radar reassessment run, and a reassessment you start by hand with the box left checked. A reassessment means the vendor has a completed assessment, or a last assessed date brought over from another platform. A vendor’s first assessment always starts right away, because there is no earlier answer to confirm.

​
How it works

1

The reassessment is created and waits

The reassessment is created from its plan on schedule, from Radar, or by hand. It stays in Created. No vendor portal goes out and no analysis runs.
2

The relationship owner gets the IRQ

Coverbase emails the vendor’s relationship owners a link to the IRQ, with last cycle’s approved answers filled in. A reassessment for one service goes to that service’s relationship owners, then the vendor’s.
3

The owner confirms or changes each answer

The owner clicks Confirm all for answers that are still true and changes the ones that moved. They cannot submit while a carried-forward answer is unconfirmed.
4

Coverbase or the assignee decides

If the owner kept every answer, Coverbase approves the IRQ and the assessment starts on its own. If anything changed, the assessment’s assignee reviews the changes and clicks Confirm and start assessment.
5

The assessment starts

Confirming approves the IRQ onto the vendor the same way any IRQ approval does: inherent risk scores, tags and contacts update. The plan is then applied again, so its rules pick questionnaires and control sets from the new inherent risk, and document collection begins.

​
Step 1: Turn on the check for a plan

Open Configuration, choose Assessment Settings, and open the plan your reassessments use. Changing a plan needs a role that can change organization settings.
1

Choose Confirm inherent risk first

Under Before a Reassessment Starts, choose Confirm inherent risk first. Start right away keeps today’s behavior.
2

Pick the IRQ

Choose the Inherent Risk Questionnaire to send. Use the IRQ your intake uses, so the owner sees the same questions they answered before and their answers carry forward. If you publish a new version of it, sends use the published version.
3

Set how long the owner has

Due After is the number of days before the owner’s link is due. The default is 14. Portal reminders apply as they do for any IRQ.
Click Save plan. Reassessments created after the save use the check. Reassessments already in progress are not changed.
The IRQ goes out when the reassessment is created, which is the plan’s Document collection offset before the reassessment date. Lengthen that offset by the owner’s due window so the vendor still has the time it had before. See Admin setup.
A Zero Touch plan cannot use the check, because a Zero Touch assessment contacts nobody.

​
Step 2: Follow a reassessment that is waiting

Open the assessment. The Inherent Risk Check card on the Summary tab says who the check is waiting on, when it was sent and is due, and which approved IRQ the answers came from. The status card reads Confirm inherent risk above the assessment’s phases. From the card you can:
  • Click Open IRQ to read the owner’s answers so far.
  • Click Send to someone else to send the IRQ to a different person, for example when the relationship owner is out. When no relationship owner has an email address, the button reads Send IRQ and nothing has been sent yet.
  • Click Skip and start assessment to start without the check. See Skip the check.

​
Step 3: Review the owner’s changes

When the owner submits with changes, the card reads Ready for your review. It shows:
  1. How many answers the owner kept and changed.
  2. The inherent risk level before and after, for example High to Critical.
  3. Each changed answer, with the old answer struck through above the new one.
Click Confirm and start assessment. The assignee also gets a review item in their work queue for the IRQ; approving it from the submission page does the same as confirming on the card.
Confirming updates the vendor’s inherent risk, which can change its reassessment cadence under your reassessment rules. It keeps the assessment’s plan. To use a different plan for the new risk level, edit it on the assessment’s Plan card while documents are still being collected.

​
Skip the check

Click Skip and start assessment, give a reason, and confirm. The assessment starts on the vendor’s current inherent risk. The IRQ stays open: if the owner answers later and you approve it, the vendor’s inherent risk updates as it does for any IRQ. The card keeps who skipped and why.

​
Start a reassessment by hand

Click Start reassessment on the vendor, or create an assessment from Assessments, and choose a plan that has the check. If the vendor has been assessed before, the dialog shows Confirm inherent risk with the relationship owner first, checked. Leave it checked for the check, or clear it to start right away.

​
When the check does not run

Admin setup

Assessment plans, reassessment rules and the reassessment timeline.

Running an assessment

What happens after the assessment starts.

IRQ Library

Choosing and weighting the IRQ the check sends.

The vendor record

Setting relationship owners.