Risk Rating is set as empty in the Vendor Risk Assessments

[Ricardo Medina1]

Hello,

Apparently my Default Risk Rating Scale is not working correctly, the VRAs are being set with the Risk Score, for Example 92, but the Risk Rating field is empty when it should've been set as Very High.

Thanks

[Community Alums · Accepted solution]

Hi @Ricardo Medina1 ,

You can Navigate to  Third-Party Risk Management> Assessment Setup> Risk Rating Scale:

Out of the box, the third-party risk assessment has a set of default risk rating scales and a default scoring rule. If you don't setup your own scales and/or rules, the default ones are used for risk calculations. For the risk rating scales, it will take risk scores between 0 and 100, and map to 1 - Very High to 5 - Very Low. For the default scoring rule, it will only take "default risk criteria" and "default component criteria". The default component criteria only takes the third-party risk assessment results into calculation.

If you don't want to define your third-party risk area criteria, the default risk area criteria is used, when you design your questionnaire templates, please ensure only use "default" risk area.