Manage issues
Verify that an issue that is associated with a risk assessment is understood, communicated to the appropriate persons, and is acted on as needed.
Before you begin
Role required: sn_vdr_risk_asmt.vendor_assessor
Procedure
-
Use either of the following methods to start the process:
- On the TPRM
Home page
, the highest priority issues are listed in the Issues by priority section. Select an issue name to view the Risk overview tab on the Issue page.
- On the List page
, select the issue name from one of the lists in the Issues section to view the Risk overview tab on the Issue page.
Note:For each issue, the system auto-assigns a unique ID number that starts with the text VRI. The unique ID is used in all references to the item. You can use the ID to search or filter for the item that you want to work on. - On the TPRM
Home page
- Optional:
Select an action.
- Select Discuss to send a message to other users. The message is recorded in the Activity section of the Details tab.
- Select Create task to create a task. See Create a task for a third party or engagement.
- Select Save to save any change you made to a value on any tab.
- Select Delete to delete the issue record.
-
Open the appropriate tab.
On each tab, the Third-party overview section displays general details for the third party.
- Risk overview tab for an issue
- The workflow chain along the top identifies the current state of the issue. The state is updated as you perform actions that are associated with the issue.
- Tasks section: Lists associated tasks and displays the count and status of tasks. For each issue, the system auto-assigns a unique ID number that starts with the text VRI. The unique ID is used in all references to the item. You can use the ID to search or filter for the item that you want to work on.
- Tasks by planned end date section: Helps you to identify tasks that need urgent attention.
- Third-party overview section: General details for the third party.
- Details tab for an issue
- Third-party risk issue section: General information on the third party and recommended actions for the issue.
- The Compose section on the Details tab enables you to permanently add text to the record. The Activity section is updated with any actions on issues and tasks, submissions to TP contacts, and also with work notes and comments that users add to the record. Add text in the following fields as needed:
- Work notes (Private): Information about the third-party risk assessment. Work notes are visible only to internal users who are assigned to the process.
- Comments: Comments about the third-party risk assessment are visible both to internal users and to third-party contacts.
- Tasks tab for an issue
- The tab displays information for tabs that are associated with the issue. Select a task number to open the task in the task management page. Select New to create a task. See Create a task for a third party or engagement.
- Questions tab for an issue
- The tab displays a list of the questions that are associated with the issue. Select a question to view the question definition and current response.