Your Improvement Plan is published alongside your scorecard and is one of the most valuable tools the CyberVadis assessment provides. It gives you a prioritized, actionable list of security improvements your company can make, each linked directly to a specific gap identified during the assessment and each showing the potential impact on your overall score.
How the Improvement Plan is structured
The Improvement Plan uses a Kanban-style board: a visual layout with columns representing the status of each action. Every improvement action sits in one of three columns:
To Do: actions you have not yet started
In Progress: actions you are actively working on
Completed: actions you have finished
Move actions between columns by dragging and dropping them as your work progresses. This keeps your plan up to date and ensures your clients can see your real-time progress.
Understanding each improvement action card
Each action card contains the following information:
Description of the gap: what the control weakness is and why it matters
Implementation guidance (🎓): specific, practical steps you can take to address the gap. Use this guidance to understand not just what needs to be done but how to do it.
Expected impact: located in the top right corner of the card, this shows how significantly completing this action will boost your overall score. This is the maximum possible uplift if the action is fully validated in a reassessment.
Maximum score: shown at the bottom of the card, this indicates the highest score your company could achieve upon full reassessment once this action is completed.
Forecast score
As you move actions into the Completed column, a forecast of your potential new overall score is calculated and displayed at the top of the Improvement Plan page. This gives you a real-time indication of the score you could achieve in a reassessment based on the actions you have completed. Your clients can also see this forecast score alongside your current scorecard.
Visibility to your clients
Clients and partners with whom you have shared your scorecard can see your Improvement Plan and track your progress in real time. This transparency strengthens trust and demonstrates that you are actively working to improve your security posture, not just resting on your assessment results.
Getting your score updated
Completing actions in the Improvement Plan does not automatically update your scorecard. To get your score revised, you need to go through a reassessment. See [How to get your score revised: reassessment and additional assessments] for full details.
Questions and support
If you need support with a specific improvement action or have questions about your Improvement Plan, contact us at support@cybervadis.com.