QuestionQ9

Third-party Due Diligence

Under what circumstances should a Third-party Risk Issue be created?

Choose three
  • A When identifying a risk to a business
  • B When the third party does not include documentation required as part of an assessment
  • C When a response to a question in the risk assessment is not satisfactory
  • D When there is more than one third-party contact submitting responses
  • E When there are items that require additional follow-up
Explanation

Third-party Risk Issues track concerns that require remediation during a third-party assessment, including missing required documentation, unsatisfactory questionnaire responses, and findings needing further follow-up. ServiceNow documents that assessment gaps can generate issues or tasks and that issues are created to ensure concerns about a third party or engagement are remediated.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!