Convert risk tier assessments to IRQ assessments

  • Release version: Washingtondc
  • Updated January 30, 2025
  • 1 minute to read

    • To make optimum use of TPRM workspace operations, convert existing tiering assessment data to Inherent Risk Questionnaire (IRQ) data.

    Before you begin

    Role required: sn_vdr_risk_asmt.vendor_assessor

    About this task

    Note:
    The procedure described here uses the TPRM user interface to make the changes — you might choose to create a script to perform the changes.
    How the IRQ table relates to the legacy tiering assessment table
    The table that holds IRQ records extends the table that holds legacy tiering assessment records:
    • The existing table sn_vdr_risk_asmt_vdr_tiering_assessment is used only for legacy tiering assessment data.
    • Records for all TPRM IRQ processes are in the child table sn_vdr_risk_asmt_internal_assessment.
    Differences between the two tables
    • Because the IRQ table is a child of the tiering table, the tables have different sys_class_name values.
    • The IRQ table has two additional business rules.
    • The IRQ table takes only questionnaire templates with a classification of IRQ.
      Note:
      The risk scoring rules for tiering assessment templates might differ from the rules for IRQs. In many cases, you can achieve good results by using the tiering assessment templates and changing the classification of the templates to IRQ.
    • The State field retains the original values in the code, but the Tiering assignment label is replaced by Response received. The Draft, Awaiting response, and Closed state labels are unchanged.
    Overview of the procedure
    1. For all assessments where Task type = Tiering assessment: Change the Task type value to Internal assessment.
    2. The system auto-updates the State value from Tiering assignment to Response received
    The result is that the data is stored as an IRQ and you can use the data in TPRM workspace operations.
    Important:
    For each risk tiering assessment, the system auto-assigns a unique ID number that starts with the text VTA. The VTA number remains unchanged even after you change the Task type value.

    Procedure

    1. Navigate to All > Third-party Risk Management > Tiering Assessments > All Assessments.
    2. Add the Task type column to the list.
    3. For each assessment where the Task type value is Tiering assessment, double-click (or use the keyboard shortcut) the field and change the value to Internal assessment.

      Convert a tiering assessment record to an IRQ record.