Controlspan / Field notes   Enterprise GRC intelligenceResearch edition · October 2026 · US market
Readiness quiz / RESEARCH NOTE 02

How should your team answer and calculate the score?

CONTROLSPAN RESEARCH DESKSECTION 08 · PAGE 2 OF 13Last updated 28 October 2026
  1. Define the assessment boundary. Record the first workflow, legal entities, business units, current repositories and intended decision date.
  2. Choose one answer per question: A = 0, B = 1, C = 2, D = 3 points.
  3. Choose the highest answer you can fully substantiate. D includes the relevant preparation described in C. If evidence is missing or stakeholders disagree, use the lower supported answer.
  4. Treat unknown as zero. Record the unanswered issue separately; do not turn uncertainty into an assumed capability.
  5. Keep all 15 questions in the denominator. Deliberately excluding AI or integrations can earn full points where the exclusion is documented and controlled, as described below.
  6. Add the points, then apply the mandatory gates. A gate failure changes the recommended action, not the arithmetic.

Ask the programme lead to consolidate responses from the sponsor, process owners, IT/security, finance/procurement and internal audit where relevant. One person may cover several roles; the test is accountable capacity, not job-title count.

Evidence standard: an approved email, decision log, sample extract or working spreadsheet can qualify. A verbal intention cannot. Keep sensitive evidence in your own approved systems; synthetic or redacted examples are sufficient for quiz discussions.

Pre-selection distinction: full marks mean the buyer has prepared and rehearsed the evaluation requirements. They do not mean an unselected platform has passed them. Supplier demonstrations, due diligence and implementation acceptance remain separate steps.


← PREVIOUS PAGEWhat does this GRC readiness assessment measure?NEXT →Domain 1: Have you agreed what the platform must accomplish?

Find the evidence.

Search across 188 research pages and 12 sections.