What happens to an IRQ questionnaire when the internal assessment becomes past due?

ajaymandal
Tera Contributor
Hi everyone,
I am working with the Vendor Risk Management (VRM) / Third-Party Risk Management (TPRM) module and have a question regarding internal assessment deadlines.
If an internal assessment (like an Inherent Risk Questionnaire / IRQ) passes its due date, what is the default system behavior for the questionnaire sent to the internal IRQ assessor?
Specifically:
  • Does the assessment instance automatically change state (e.g., to Overdue or Cancelled), or does it remain Open/Work in Progress?
  • Can the assigned internal assessor still access and submit the questionnaire after the due date has passed?
  • Does the system trigger any out-of-the-box notifications or escalate the task automatically?

 

***What I have observed is that after past due date which was 30days, IRQ assessor was not able to find the IRQ questionnaire in Employee Center > Surveys***

 

 

Any insights on the default workflow or best practices for handling past-due internal assessments would be greatly appreciated!
Thanks in advance.
1 REPLY 1

Mahesh Baraskar
Mega Guru

Hi @ajaymandal 

 

In ServiceNow, if an Inherent Risk Questionnaire (IRQ) passes its due date, the platform does not automatically cancel or expire it out of the box.

ServiceNow handles overdue inherent risk and tiering assessments in a specific way:

 

What Happens Out-of-the-Box:

Remains Open: The assessment instance status typically remains in the Ready or WIP (Work in Progress) state.

Manual Completion: The respondent (internal user or third party) can still open the link and submit their questionnaire even though the due date has passed. Scheduled Job (Cancel Expired Assessments): ServiceNow contains an out-of-the-box scheduled job called "Cancel Expired Assessments" that automatically cancels expired surveys and attestations. However, risk assessments and third-party risk questionnaires are frequently excluded from this automated cancellation to prevent the loss of critical compliance and risk data.

 

Specifically:
  • Does the assessment instance automatically change state (e.g., to Overdue or Cancelled), or does it remain Open/Work in Progress? :  Remains in Open/WIP state
  • Can the assigned internal assessor still access and submit the questionnaire after the due date has passed?  :  Yes, can access OOB
  • Does the system trigger any out-of-the-box notifications or escalate the task automatically?:  ServiceNow does not trigger automatic overdue notifications for inherent risk questionnaires out-of-the-box (OOB).