Information Security

This message was posted by a user wishing to remain anonymous

Greetings Community, 

I am curious how other firms are handling reviews in foreign languages when you don't have the staffing to support them? Do you translate? Outsource? If outsourced is there a risk threshold before you will send it?

Thanks in advance!

This message was posted by a user wishing to remain anonymous

Greetings.  We have has some success outsourcing when there is no other alternative.  There are a few companies that offer translation/review in native language.

This message was posted by a user wishing to remain anonymous

We created an initial risk assessment intake form in the regional language, allowing the business requestor to provide details about the product/service, and responses to the risk assessment qustionnaire in the regional language, and used a language translator to convert it back to English. By doing this, the risk assessor will have initial details of supplier engagement, Also, we set expectations from the business to bridge between the risk assessor and the supplier contact, during due diligence of supplier control validation.