Send an assessment to a third party

Where: Trust Management → Third-Party Risk Management → Third Parties → open a third party → Assign template.

Who: admins, or members whose department has access to the TPRM module.

Before you start: you need a published template (Build a third-party assessment template) and the third party must exist (Add a third party).

Steps

1. Open Third Parties and click the third party.
2. Click Assign template (in the page header or the Associated assessments card).
3. Choose the Template. Only published templates appear in this list.
4. Set the Due date. It defaults to 14 days from today.
5. Under After approval, check the Reassessment Cadence. It defaults to the cadence for the vendor's risk rating (marked Policy default); change it if needed.
6. Click Send assessment.

The vendor gets an email with a private link to answer the questionnaire. Once you approve their response, the next assessment is scheduled automatically using the cadence you chose.

You can also send from a template: open it in Templates, click Assign Third-party, choose the Third Party and click Assign.

Withdraw an assessment

Click Unsend on the assessment and confirm. The third party is emailed that the assessment was withdrawn, loses access immediately, and the assessment disappears from the list. This cannot be undone.

Next step

Review the vendor's response.