Third-party contacts use the Third-party portal to complete assessments and collaborate with the TPR manager in the comments section for each question. When assessments reveal gaps, the TPR manager or the TPR assessor can generate an issue or task. In addition, the Vendor Management Workspace application can auto-generate issues.

Before you begin

Role required: sn_vdr_risk_asmt.vendor_assessor

About this task

If the TPR manager or TPR assessor decides that an assessment response is unsatisfactory, they can return some of the questions or document requests in the assessment. Incorrect answers to questions can automatically generate issues, or issues can be generated manually from the question. The comments identify the issues to the third-party contact.

To enable TPR assessors to modify responses, configure the Allow TPR assessors to modify responses in third-party questionnaires [sn_svdp.allow_assessor_edit] system property. You can set the following options:
  • Enable TPR assessors to answer questions or modify responses (default)
  • Enable TPR assessors to modify responses
  • Do not enable TPR assessors to answer questions or modify responses
See Configure TPRM properties.

Procedure

  1. Navigate to All > Self-Service > Third-party risk management > External risk assessments > All open.
  2. Select the External assessment (VRA) number of an assessment that is in the Responses received state.
  3. On the Risk overview tab, in the Questionnaires and document requests section select the templates related list, select the Name or Questionnaire instance to open the questionnaire that you want.
  4. If you’re using the Classic assessment engine, you can fill in the following fields.
    Table 1. Third party's responses
    Field Description
    Reviewer comment Text that provides internal information about the state of responses.
    Show follow-up only Select the check box to display only questions that were flagged as needing a follow-up (the Follow up check box was selected when the assessment was returned to the third-party for updates).
    Show incorrect or un-scored responses only Select the check box to display only questions with an incorrect answer or for which no response was given.
    Show unanswered questions only Select the check box to display only questions for which no response was given.
    Hide comments Select the check box to hide all Comment text boxes.
    Include this question when creating an issue Select the check box to indicate that you want to create an issue dealing with this question. You can add an Internal comment.
    Note: If you have already created an issue for a question, the field is inactive to help prevent you from creating an additional issue for the question.
    Follow up Select the check box to make the external comment visible to the third party.
    Comment for third party Select the check box to add an External comment for the third party.
  5. After you review the assessment and add comments, perform one of the following steps.
    ChoiceDescription
    To generate issues associated with each question in the classic assessment engine Select Create Issue. A message with the issue number appears, and each question with an issue shows an icon to indicate that you can’t create a new issue for the question. The indicator is removed when the issue is closed or canceled.
    Question with an issue.
    Note: This is available when you’re using the Classic assessment engine.
    To resubmit the assessment to the third party or engagement Select Return to third party.

    If the assessment schedule might be affected, you can extend the term by adjusting the number of days in the Return questionnaire window.

    Note: After the assessment has been submitted, the third party or engagement can’t make edits to the assessment. You can return the assessment to the third party or engagement if changes are required.
    To export a spreadsheet with responses, comments, and issues in the classic assessment engine Select Export responses.

    A Microsoft Excel spreadsheet is generated containing the latest responses, comments, issues, and assessment details.

    Note: This is available when you’re using the Classic assessment engine.
    To add notes or comments and review questionnaire activity Select the Notes and Comments tab.
    Note: This is available when you’re using the Classic assessment engine.