---
sourceDocument: Yokohama Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/governance-risk-compliance

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Respond to internal assessments

# Respond to an internal assessment {#ariaid-title1}

* Release version: Yokohama
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Respond to an Inherent Risk Questionnaire (IRQ) or internal assessment that has been assigned to your queue. Your responses to the questionnaire help determine if the process moves forward and can affect which questionnaires are sent to the third party or engagement.

## Before you begin

Role required: snc_internal

## About this task

When someone in your organization creates a due diligence request, the owner of the overall due diligence process specifies who should respond to that initial IRQ. Internal assessments can also be created on demand and the owner assigns questionnaires to IRQ assessors or respondents. As an IRQ assessor or respondent, you receive an email that contains the links to the assigned questionnaires, the name of the related assessment, and the deadline. This information is also provided as part of the questionnaire in Employee Center. For more information, see [Assessing your third-party risk](https://servicenow-prod.fluidtopics.net/2D8z85RJH2DGftJ3bDcB3w "Use Third-party Risk Management to identify and assess potential risks that are associated with your third-party relationships. The information gathered from internal questionnaires, external questionnaires, and documentation requests helps you to understand the third party's risk profile, determine the appropriate risk mitigation strategies, and determine whether the third party or engagement meets all necessary compliance requirements."), [Create an internal assessment](https://servicenow-prod.fluidtopics.net/a~fMhMIpnFlH~_qf2danLg "Create an internal assessment as part of a due diligence request or ongoing risk monitoring using Third-party Risk Management. An internal assessment can affect which questionnaires are later sent to the third party or engagement."), [Requesting third-party risk due diligence](https://servicenow-prod.fluidtopics.net/yUyZFmUWfUXOQzFZd3d7fA "Request third-party risk due diligence to determine the level of risk for interactions with a third party, engagement, or fourth party by using Third-party Risk Management. You conduct due diligence to become aware of the associated risks so that you can make informed decisions, establish appropriate controls, and mitigate the potential negative impact when working with external parties."), and [Due diligence workflow](https://servicenow-prod.fluidtopics.net/NLj2bbUiV1F80L9JpZ6N2Q "The Third-party risk management (TPRM) processes provide a consistent framework for your third-party risk management program. You can customize the workflow processes to meet your organization's needs.").  
Note:  
When a request is created, the system alerts the initial due diligence requester and all users in the Due diligence request assignment group. A member of the group can assign a Third-party risk (TPR) manager or TPR assessor to act as the owner of the request.

## Procedure

1. Navigate to AllSelf-ServiceEmployee Center to open your Employee Center.
2. Respond to an internal assessment by performing one of the following.

   | Option | Description |
   | Respond to an IRQ or Internal questionnaire using the Classic engine | In the My active items pane, select Surveys and In the My Assessments and Surveys section, select the assessment you want to respond to. |
   | Respond to an IRQ or internal questionnaire using the Smart Assessment Engine | 1. In the My active items pane, select GRC tasks and In the My to-dos section, select any number to open the list of assessments with that state. 2. Select the TPRM assessment that you want to respond to. {#tprm-irq-respond-to__ol_arw_522_yfd} Note: You can reassign a questionnaire to another team member by selecting the more actions menu icon ![]() and selecting Reassign. After reassigning the questionnaire, you lose access to the questionnaire. |
   |-|-|

   {#tprm-irq-respond-to__choicetable_zqw_522_yfc}
3. Answer all relevant questions in the questionnaire and then select Submit.
**Related concepts**   

* [Assessing your third-party risk](https://servicenow-prod.fluidtopics.net/2D8z85RJH2DGftJ3bDcB3w "Use Third-party Risk Management to identify and assess potential risks that are associated with your third-party relationships. The information gathered from internal questionnaires, external questionnaires, and documentation requests helps you to understand the third party's risk profile, determine the appropriate risk mitigation strategies, and determine whether the third party or engagement meets all necessary compliance requirements.")
* [Why you conduct due diligence](https://servicenow-prod.fluidtopics.net/yYIHumJ5NvhBdx4MCwF0zA "Conducting due diligence on third parties is a crucial component of your comprehensive third-party risk program. You conduct due diligence to become aware of the risks that are associated with a third party so that you can confidently decide how to form your relationship.")  
**Related tasks**   

* [Create an internal assessment](https://servicenow-prod.fluidtopics.net/a~fMhMIpnFlH~_qf2danLg "Create an internal assessment as part of a due diligence request or ongoing risk monitoring using Third-party Risk Management. An internal assessment can affect which questionnaires are later sent to the third party or engagement.")

*[\>]: and then