How to use this assessment. Complete each section below based on documentation provided by the vendor (SOC 2 report, security questionnaire responses, insurance certificates, contract terms, etc.). Each answer contributes to a weighted risk score shown on the right. Fields marked with an asterisk are required for a valid score.