---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Create an internal task

# Create a task for an internal user {#ariaid-title1}

Release version: Australia  
Updated September 14, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Create an internal task to assign follow-up work to an internal user, rather than to a third-party contact, as part of your organization's third-party risk processes.

## Before you begin

Role required: sn_vdr_risk_asmt.vendor_assessor

## About this task

Tasks are commonly used to track follow-up work with a third-party contact. For information about creating and managing tasks for third-party contacts, see [Create a task for a third party or engagement](https://www.servicenow.com/docs/MPC40gMDINR66X6J3WV9wg "Create a task to help ensure that a user at your organization or the third-party contact responds to your concerns about questionnaire responses or requested documents during the due diligence process.") and [Manage a task for a third party or engagement](https://www.servicenow.com/docs/65_~BivA3nz9Q20MYNS1oQ "Verify that the Assigned to user at your organization or the third-party contact responds to a task and update the state of the task as needed."). An internal task is a related but separate record type that assigns follow-up work to an internal user instead of a third-party contact. Internal tasks aren't visible to
third-party contacts and don't appear in the third-party portal.

Internal tasks can be automatically generated and assigned to a specified respondent, depending on how your organization configures its due diligence and risk processes. For example, the task can be assigned to the person who
submitted a request, so the respondent can provide additional information before the process continues.

When an internal task is submitted to a respondent, the respondent is automatically granted the internal task responder role required to complete the task. For more information about this role, see [Roles in Third-party Risk Management](https://www.servicenow.com/docs/evCsII5xVZfz3HPLJm9YZw "Roles determine permissions and access in TPRM.").

You can assign an internal task to any internal user in your organization. The respondent completes the task from the Employee Center, under GRC tasks.

## Procedure

1. Navigate to WorkspacesVendor Management Workspace, select the list icon ![]() and then navigate to Internal tasksAll tasks.
2. Select New and fill in the form.  
   For descriptions of all these fields, see [Create new third-party risk task form](https://www.servicenow.com/docs/s3TSZoXot1DxHhh6QbhhtQ "Use the third-party risk task form to capture the information needed to create a task in the Third-party Risk Management application. As a third-party risk assessor or manager, you can create an internal or external task.").
3. Select Save.
{#tprm-internal-tasks__steps_n5g_cqz_xjc}

## What to do next

The assigned respondent completes the follow-up work from the Employee Center, under GRC tasks, and updates the task state as they progress. Monitor and update the task in [Manage a task for a third party or engagement](https://www.servicenow.com/docs/65_~BivA3nz9Q20MYNS1oQ "Verify that the Assigned to user at your organization or the third-party contact responds to a task and update the state of the task as needed.").

The respondent can also view assigned internal tasks in the GRC Portal.

Internal tasks transition through the following states as they are created, assigned, completed, and reviewed:

* Open --- Task is created and awaiting assignment to a respondent.
* Submitted to responder --- Task is assigned to a respondent; the respondent can now access and complete it. The respondent is automatically granted the internal task responder role.
* Review --- Task is submitted for review by the assessor or due diligence request owner.
* Closed --- Task review is complete and the task is closed.
{#tprm-internal-tasks__ul_d2q_4pt_4kc}
**Related tasks**   

* [Create a task for a third party or engagement](https://www.servicenow.com/docs/MPC40gMDINR66X6J3WV9wg "Create a task to help ensure that a user at your organization or the third-party contact responds to your concerns about questionnaire responses or requested documents during the due diligence process.")
* [Manage a task for a third party or engagement](https://www.servicenow.com/docs/65_~BivA3nz9Q20MYNS1oQ "Verify that the Assigned to user at your organization or the third-party contact responds to a task and update the state of the task as needed.")  
**Related reference**   

* [Create new third-party risk task form](https://www.servicenow.com/docs/s3TSZoXot1DxHhh6QbhhtQ "Use the third-party risk task form to capture the information needed to create a task in the Third-party Risk Management application. As a third-party risk assessor or manager, you can create an internal or external task.")
* [Roles in Third-party Risk Management](https://www.servicenow.com/docs/evCsII5xVZfz3HPLJm9YZw "Roles determine permissions and access in TPRM.")

*[\>]: and then