Review responses to external questionnaires

  • Release version: Washingtondc
  • Updated January 30, 2025
  • 2 minutes to read

    • Third-party contacts use the Third-party portal to complete assessments and collaborate with the TPR manager in the comments section for each question. When assessments reveal gaps, the TPR manager or the TPR assessor can generate an issue or task. In addition, the Vendor Management Workspace application can auto-generate issues.

    Before you begin

    Role required: sn_vdr_risk_asmt.vendor_assessor

    About this task

    If the TPR manager or TPR assessor decides that an assessment response is unsatisfactory, they can return some of the questions or document requests in the assessment. Incorrect answers to questions can automatically generate issues, or issues can be generated manually from the question. The comments identify the issues to the third-party contact.

    To enable TPR assessors to modify responses, configure the Allow TPR assessors to modify responses in third-party questionnaires [sn_svdp.allow_assessor_edit] system property. You can set the following options:
    • Enable TPR assessors to answer questions or modify responses (default)
    • Enable TPR assessors to modify responses
    • Do not enable TPR assessors to answer questions or modify responses
    See Configure TPRM properties.

    Procedure

    1. Navigate to All > Self-Service > Third-party risk management > External risk assessments > All open assessments.
    2. Select the External assessment (VRA) number of an assessment that is in the Responses received state.
    3. In the Questionnaires or Document Requests related list, select View responses to choose the questionnaire or document request that you want and then fill in the fields.
      Table 1. Third party's responses
      Field Description
      Reviewer comment Text that provides internal information about the state of responses.
      Show follow-up only Select the check box to display only questions that were flagged as needing a follow-up (the Follow up check box was selected when the assessment was returned to the third-party for updates).
      Show incorrect or un-scored responses only Select the check box to display only questions with an incorrect answer or for which no response was given.
      Show unanswered questions only Select the check box to display only questions for which no response was given.
      Hide comments Select the check box to hide all Comment text boxes.
      Include this question when creating an issue Select the check box to indicate that you want to create an issue dealing with this question. You can add an Internal comment.
      Note:
      If you have already created an issue for a question, the field is inactive to help prevent you from creating an additional issue for the question.
      Follow up Select the check box to make the external comment visible to the third party.
      Comment for third party Select the check box to add an External comment for the third party.
    4. After you review the assessment and add comments, perform one of the following steps.
      ChoiceDescription
      To generate issues associated with each question Select Create Issue. A message with the issue number appears, and each question with an issue shows an icon to indicate that you can’t create a new issue for the question. The indicator is removed when the issue is closed or canceled.
      Question with an issue.
      To resubmit the assessment to the third party or engagement Select Return to third party.

      If the assessment schedule might be affected, you can extend the term by adjusting the number of days in the Return questionnaire window.

      Note:
      After the assessment has been submitted, the third party or engagement can’t make edits to the assessment. You can return the assessment to the third party or engagement if changes are required.
      To export a spreadsheet with responses, comments, and issues Select Export responses.

      A Microsoft Excel spreadsheet is generated containing the latest responses, comments, issues, and assessment details.
      To add notes or comments and review questionnaire activity Select the Notes and Comments tab.