Request third-party risk due diligence request form

  • Release version: Australia
  • Updated March 12, 2026
  • 2 minutes to read

    • The due diligence request form captures all the initial information that you need to start the due diligence process. Any employee within your organization can request due diligence. If you’re selecting an existing third party, a significant portion of the information is automatically filled in.

    Table 1. Request third-party risk due diligence form
    Field Description
    Third-party information section

    Name, DUNS number, Phone, Industry, Website, and Fax

    Standard information for the parent organization.

    A DUNS number isn’t legally required for a business.

    Note:
    • The third party that you identify here might be the target of your request, or it might be the parent of the organization that you engage with. You add the information about the engagement organization in the following Engagement address section.
    • In the Third-party due diligence request [sn_tprm_dd_request] table, there are two DUNs number columns: vdr_duns_number indicates the third party DUNs number and eng_duns_number indicates the engagement DUNs number.
    Engagement information section
    Name

    Name that identifies this engagement on all forms and lists.
    Type Type of product or service that the engaged organization provides.
    Phone / Fax Phone and fax numbers of the department or subsidiary organization that the engagement relates to. This number could differ from the number for the parent third party.
    Request start date Date by which you need the engagement to be active so that you can engage with the third party. This information helps the Third-party risk (TPR) manager to prioritize your request.
    Request end date Date at which you expect to end the engagement.
    User who will respond to the initial IRQ Person with the IRQ assessor role who should respond to the IRQ. For more information, see Respond to an internal assessment.
    Note:
    While reviewing this request for due diligence, the TPR manager or owner can specify a different user.
    Third-party address section
    Street, City, State/Province, ZIP/Postal code, Country

    Standard address information for the parent organization.
    Engagement address section
    Street, City, State/Province, ZIP/Postal code, Country

    Standard address information for the engagement organization.

    Select Same as third-party address if the target of your engagement request is the parent third-party organization.
    Third-party primary contact section
    First name, Last name, Title, Email, and Phone

    Standard contact information for the person at the third-party organization who acts as the primary third-party contact.

    For a description of the responsibilities of the third-party contact role, see Roles in Third-party Risk Management.
    Engagement primary contact section
    First name, Last name, Title, Email, and Phone

    Standard contact information for the person at the engagement organization who acts as the primary third-party contact.

    If the target of your engagement request is the parent third-party organization, select Same as third-party primary contact.

    For a description of the responsibilities of the third-party contact role, see Roles in Third-party Risk Management.