Vendor invitation: How to upload documents

In this article:

If you recently received an email invitation to join SecurityScorecard, you may be wondering why. Here are answers to some commonly asked questions:

Why am I being asked to upload documents?

The sender is reviewing your security posture and wants to review certain documents to get a fuller picture of both internal and external security practices.

How do I upload documents?

You can upload directly from the email by tapping "Upload Documents."

Or, you can log in to your SecurityScorecard account and add them to your Evidence Locker. That way, you'll satisfy the needs of the requesting organization and you'll make it easier to find and manage with future customers and prospects.

Badges are used to quickly identify documents.

To add a document:

1. Choose the Evidence Locker tab on your company's scorecard.
2. Choose "Add evidence."
   
   
   
   
3. Now you can upload a file, add an external link, or import a file.
4. If the document is only valid for a certain amount of time, you can set those dates. If it's valid indefinitely, choose "not applicable."

5. You can also choose your privacy settings or share with specific people.

6. Finish the posting by choosing the relevant option: 

• Choose "Submit" for an upload.
• Click "Add link" for a shared hyperlink.

Choose "Import" for a file imported from Atlas.

After you successfully post the file, the badge darkens, and you see the option to download or delete the file.

What is SecurityScorecard?

SecurityScorecard is a global leader in cybersecurity ratings. Its goal is to make the world a safer place by transforming the way organizations understand, mitigate, and communicate cybersecurity risk.
SecurityScorecard continuously scans the web to detect and collect signals that indicate the potential for vulnerabilities or the confirmation of exploits.

Why did my organization receive an email invitation?

You're a vendor that currently does business with the sender.

or

You're a vendor that may do business with the sender in the future.

The organization that invited you will likely share critical data or access with you. They want to ensure all their vendors maintain a strong external security posture and remain unlikely to suffer a breach

What is a Scorecard?

A Scorecard is an objective assessment of an organization's security posture.The data included on the Scorecard is generated by continuous  scans of internet-facing IP addresses. In those scans, signals are detected, collected, and categorized into factors. Each factor gets its own numeric score based on its importance. An overall score and letter grade (A-F) is displayed prominently on the Scorecard. Your score is directly linked to the likelihood of breach. For example, an F means your organization is 13.8 times more susceptible to a security breach than an organization with an A.