Create an issue for a third party or engagement

  • Release version: Australia
  • Updated March 12, 2026
  • 2 minutes to read

    • Create an issue to help ensure that your concerns about a third party or engagement are remediated.

    Before you begin

    Role required: sn_vdr_risk_asmt.vendor_assessor

    About this task

    In an iterative process, before the TPR manager closes an assessment, the TPR manager can generate non-compliance issues and tasks. The TPR manager communicates with the TP contacts and engagement contacts by using comments to close the issues and tasks. The TPR manager can also assign different contacts as needed.

    Procedure

    1. In the Quick actions box on the TPRM home page , select Create issue.
    2. Optional: Select a template to fill in several fields on the form.
      You can filter the template list and add templates to your custom My templates list.
    3. Fill in the form and then select Save.
      Table 1. Third-party risk issue form
      Field Description
      Name Helpful tag for the template. The field might be filled in by a template.
      Description Text that helps others to understand the issue.
      Number

      For each issue, the system auto-assigns a unique ID number that starts with the text VRI.

      The unique ID is used in all references to the item. You can use the ID to search or filter for the item that you want to work on.
      Applies to
      • Third party: The issue applies to the parent third-party organization.
      • Engagement: The issue applies to the engagement.
      • Entity: The issue applies to the third-party element entity.
      Third party Third party with which the issue is associated.
      Assessment Assessment with which the issue is associated.
      State The state of an issue is updated as you perform actions that are associated with the issue. The workflow chain along the top of the Risk overview tab identifies the current state of the issue. See Manage issues.
      Priority Specify the priority. The value appears in all reports that include the issue.
      Assignment group

      Qualified group of individuals available to work on the request.
      Assigned to User that is responsible for managing and closing the issue.
      Third-party contact Contact at the third party with which the issue is associated.
      Watch list Add other users to help ensure that they see updates in the issue state and other values.
      Visible in third-party portal Option to display the issue to the third-party contacts in the Third-party portal.
      Recommendations section
      Recommendation
      • Third party to remediate: You expect that the TP contact will remediate the issue so you can close it.
      • Accept issue: You determine that the risk associated with issue is acceptable and requires no further action.
      • Request additional information: You will request additional information from the TP contact.
      The field might be filled in by a template.
      Explanation The field might be filled in by a template.
      If Visible in third-party portal is selected, then the third-party contact is alerted to the issue.

    Result

    The highest priority issues are listed in the Issues by priority section of the Home page. The Assigned to user can manage the issue on the tabs of the Issue management page. See Manage issues.