When it is time for your reassessment, you do not start from scratch. Your questionnaire is pre-filled with the answers and evidence from your previous assessment, saving you significant time and allowing you to focus on what has changed rather than rebuilding your submission from the ground up.
Important: pre-filled does not mean ready to submit
While your previous answers provide a strong starting point, you must review every pre-filled answer before submitting. Security practices change, policies get updated, and evidence expires. Submitting outdated or inaccurate pre-filled answers will result in a scorecard that does not accurately reflect your current security posture.
How to complete your reassessment: step by step
Step 1: navigate to your questionnaire summary page
Log in to the CyberVadis platform at app.cybervadis.com and go to your questionnaire summary dashboard to begin your reassessment.
Step 2: re-answer the qualification questions
Begin by completing the qualification questionnaire again. This step is essential: it ensures your assessment remains accurately tailored to your company's current context. If your company's sector, size, or practices have changed since your last assessment, your qualification answers will update the questionnaire accordingly.
Step 3: review your pre-filled questionnaire
Once the qualification stage is complete, you will see your updated questionnaire summary. Questions from your previous assessment will be pre-filled. If your qualification answers have changed, some questions may be new and others may have been removed.
Work through each pre-filled section carefully. Do not assume pre-filled answers are still accurate — review each one and update anything that no longer reflects your current practices.
Step 4: review and update your evidence
For each pre-filled control, review the evidence attached from your previous assessment. For each document, ask:
Is this evidence still valid and current?
Has a newer version of this document been issued since the last assessment?
Does this evidence still accurately support the declared control?
Attach updated versions where needed and discard any evidence that is no longer valid. Evidence that has expired or been superseded will not earn the same credit as current documentation.
Step 5: complete any new questions and submit
Answer any new questions that have appeared as a result of updated qualification answers, attach supporting evidence, and mark all questions as complete. When you are satisfied that your submission accurately reflects your current security posture, submit your reassessment.
Your questionnaire autosaves as you work, you do not need to manually save your progress.
Document availability during reassessment
All documents previously uploaded and attached to your questionnaire are available for review during reassessment, unless they have been deleted. There are three scenarios in which documents may not be available:
Manually deleted: documents you deleted from your document library between your previous assessment and the current reassessment will not be available
Automatically deleted: documents that have not been attached to an assessment within the applicable retention period are automatically deleted and will not be available
Deleted on request: documents deleted at your request via our support team will not be available
If a document you need is no longer available, you will need to re-upload it. See [How to upload, manage, and delete documents] for instructions.
Combined prefill scenarios
If you hold a valid ISO 27001 certificate or use the AI prefill feature, additional prefill options apply during reassessment. See [Why do some questions already have responses? or Using AI prefill to complete your questionnaire faster] for a full explanation of how each prefill scenario works and what you need to review.
Questions
If you have questions about the reassessment process, contact our Customer Experience Team at support@cybervadis.com.