Vendor Risk Overview reports — Legacy view
Summarize
Summary of Vendor Risk Overview reports — Legacy view
The Vendor Risk Overview page has transitioned to third-party risk reports within the Vendor Management Workspace. This page provides essential insights into your third-party risk management program.
Show less
Key Features
Access the Vendor Risk Overview by navigating to All > Third-party Risk Management > Overview. The key components include:
- IRQ Process: Replaces the traditional tiering assessment with an internal questionnaire that enhances flexibility and scalability in risk assessments.
- Legacy Support: Existing tiering assessments can be duplicated and designated as IRQ internal assessments.
Vendor Risk Overview — Vendor Tab
Reports available on the Vendor tab include:
- Total Vendors: Total number of third parties.
- Open Tiering Assessments: Number of third parties with active tiering assessments.
- Open Risk Assessments: Number of third parties with active risk assessments.
- Past Tiering Assessments: Count of third parties that have not completed assessments on time.
- Vendor Classification by Tier: Visual representation of third parties by risk tier.
- Upcoming Vendor Risk Assessments: Scheduled assessments for third parties.
Vendor Risk Overview — Engagement Tab
Reports available on the Engagement tab include:
- Total Engagements: Total number of engagements.
- Open Tiering Assessments: Count of engagements with active tiering assessments.
- Engagements Classification by Tier: Distribution of engagements by risk tier.
- Open Issues by Priority: Sorted list of issues by priority level.
Important Note
The Vendor Risk Overview dashboard is deprecated starting with version 18.1.3 of Third-party Risk Management. Customers using versions prior to 18.1.3 can still access the Vendor Risk Overview dashboard.
The Vendor Risk Overview page is replaced by the third-party risk reports on the Vendor Management Workspace.
Viewing the reports
To open the Vendor Risk Overview, navigate to . The page displays reports that provide insights into your third-party risk management program. The
The more complete IRQ process replaces tiering
In the TPRM application, the IRQ is an internal questionnaire that improves the original tiering assessment process. IRQs enhance internal risk assessments with increased flexibility, control, and scalability. Unlike a tiering assessment where external questionnaires are determined solely by the risk tier, an IRQ can dynamically trigger external questionnaires based on both respondents' answers and risk tier.
To enable a seamless transition to TPRM, you have the option to duplicate existing tiering assessments and designate them as IRQ internal assessments. Risk tiering is supported as an unchanging legacy process.
Vendor Risk Overview — Vendor tab
| Report | Description |
|---|---|
| Total Vendors | Total number of third parties. |
| Open Tiering Assessments | Number of third parties with active tiering assessments open. |
| Open Risk Assessments | Number of third parties with active risk assessments open. |
| Past Tiering Assessments | Number of third parties that have not completed the tiering assessment within the assessment time frame. |
| Tier-Recommended Risk Assessments | Number of third parties performing risk assessments based on tiering. |
| Vendor Classification by Tier | Donut report showing the number of third parties assigned to each risk tier. |
| Vendors Performing Risk Assessment Based on Tiering | Number of third parties with active tiering-based risk assessments sorted by third-party risk. |
| Open Issues by Priority | All third-party risk open issues sorted by priority. |
| Vendors by Risk Rating | Number of third parties sorted by risk rating. |
| Upcoming Vendor Risk Assessments | Number of third-party risk assessments scheduled. |
| Vendor-related Policy Exceptions | All policy exceptions generated from third-party risk issues. |
Vendor Risk Overview — Engagement tab
| Report | Description |
|---|---|
| Total Engagements | Total number of engagements. |
| Open Tiering Assessments | Number of engagements with active tiering assessments open. |
| Open Risk Assessments | Number of engagements with active risk assessments open. |
| Past Tiering Assessments | Number of engagements that have not completed the tiering assessment within the assessment time frame. |
| Past Risk Assessments | Number of engagements with active tiering-based risk assessments. |
| Engagements Classification by Tier | Donut report showing the number of engagements assigned to each tier. |
| Engagements by Type | Number of engagements of each type. |
| Open Issues by Priority | All engagement open issues sorted by priority. |
| Engagements by Risk Rating | Number of engagements sorted by risk rating. |