Adding, Editing, and Deleting Third-Party Risk Management Template Rules
You can use rules to automatically trigger a specific action based on configurable criteria. Rules can be added, copied, and edited as needed to a draft template in order to meet the specific needs of your organization.
You cannot make changes to the rule configuration for a published template. In order to update the rules for a template, you need to create a new draft version. For more information, see Creating a New Version of a Vendor Template.
To add a rule
- Go to the Rules tab.
Condition Configuration Screen Reference
- Field
- Description
- Rule Name
-
Enter the name of the rule.
- Any/ All
-
Select Any to trigger the rule when at least one condition is met.
Select All to only trigger the rule when all conditions are met.
- Trigger
-
Select Question to trigger the rule when the respondent selects a specific value in response to the selected question.
Select Organization to trigger the rule when the assessment is launched under a specific organizational group.
Select Risk Score to trigger the rule when the assessment risk score is greater than or less than the specified value. Specify the value by entering a value in the Enter Risk Score field.
Select Response Count to trigger the rule when the specified value of responses to a question are completed. Specify the value by entering a value in the Enter Response Count field.
Select No Risks to trigger the rule when there are no risks flagged when the assessment is submitted.
Select Assessment Score to trigger the rule when the assessment score is greater than or less than the specified value. Specify the value by entering a value in the Enter Assessment Score field.
- Operator
-
Select Equal To to trigger the rule when the trigger is equal to the value.
Select Not Equal To to trigger the rule when the trigger is not equal to the value.
Select Greater Than to trigger the rule when the risk is greater than the value.
Select Less Than to trigger the rule when the risk is less than the value.
- Value
-
Select the response that will be used to determine if the criteria for the rule have been met.
Select the organization that will determine if the criteria for the rule have been met.
Enter the risk score that will be used to determine if the criteria for the rule have been met.
Action Configuration Screen References
Add Approvers
- Field
- Description
- Action
-
Select Add Approvers Upon Creation to automatically add certain approver(s) when the assessment is launched from a specified organizational group.
Select Add Approvers Upon Submission to automatically add additional approvers to an assessment when the specified conditions are met.
Select Add Approvers Upon Stage Change to automatically add additional approvers to an assessment when the workflow arrives to the specified stage.
- Approver
-
Select the approver that you want to be assigned by the rule.
Click Add
and Remove
icon buttons to add and remove approvers.
Auto-Complete Assessment Upon Submission
Select Auto Complete Assessment Upon Submission to automatically complete an assessment when the specified conditions are met.
- Field
- Description
- Result
-
Select auto-complete assessment to automatically Approve or Reject the assessment based on the users condition rules.
- Result Comments
-
Enter comments regarding your review. This will be included in a notification to assignees (respondents and approvers) as well as, in the assessment details.
Create Risk
View Engagement Risks
-
ViewEngagementRisks
-
engagements.risks.view
VRMEngagementsAdd
engagements.create
-
VRMChangeWorkflowOnEngagement
-
engagements.fields.workflow.edit
VRM Engagement Attribute Manager
VRMEngagementAttributeManager
- Field
- Description
- VRMEngagements
-
Enter the risk's inherent risk score.
- Risk Name
-
Enter the name of the new risk.
- Threat
-
Select the main threat(s) the risk poses to your company
- engagements.view
-
Select the main vulnerability(ies) your company has when considering the nature of the risk.
- Create and Edit Engagement Risks
-
Enter a brief description of the risk.
- engagements.risks.edit
-
Enter a plan to control, mitigate, and/or resolve the risk.
- DeleteEngagementRisks
-
Add controls from your library or create custom controls to describe the security measures against which you evaluate the risk. For more information, see Managing Controls.
Create Task Upon Submission
Select Create Task Upon Submission to automatically create a task when the specified conditions are met.
- Field
- Description
- Task Name
-
Enter a name for the task.
- Assignee
-
Enter the name of the person the task is assigned to.
- Deadline
-
Enter a deadline for the task completion.
- Collaborators
-
Enter names of collaborators associated with the task.
- Assessment Responder
-
Enable to notify the assessment responder when the task is created.
- Assessment Approver
-
Enable to notify the assessment approver when the task is created.
- Description
-
Enter a description of the task.
Send Assessment Upon Approval/ Submission
- Field
- Description
- Action
-
Select Send Assessment upon Approval to automatically launch an additional assessment when the specified conditions are met.
Select Send Assessment upon Submission to automatically launch an additional assessment when the specified conditions are met.
- Template Name
-
Select the template you want to use to launch the follow up assessment.
- Deadline
-
Enter the number of days after the assessment is launched that the assessment will expire.
- Reminder
-
Enter the number of days before the deadline which the respondent(s) should be reminded to complete the assessment.
- Approver
-
Select Current Assessment's Approver to have the follow-up assessment be assigned to the same approver as the primary assessment.
Select Unassigned to not automatically assign an approver for the follow-up assessment. An approver can be added later, after the assessment is launched.
- Respondent
-
Select Current Assessment's Respondent to assign the follow-up assessment to the same respondent as the primary assessment.
Select Current Assessment's Approver to assign the follow-up assessment to the approver of the primary assessment.
- Require Confirmation Upon Approval
-
Enable this setting to require the approver of the assessment to confirm a follow-up assessment needs to be sent.
Note:This setting is only available if the Send Assessment upon Approval action is selected.
- Automatically Approve Assessment
-
Enable this setting to automatically approve the primary assessment when the follow-up assessment is sent.
Note:This setting is only available if the Send Assessment upon Submission action is selected.
Skip to Stage
Move directly to a specified Stage for assessments using the specified Workflows.
- Field
- Description
- Workflows
-
Select the workflow that contains the stage you would like to skip to.
- Stage
-
Select the workflow stage you would like to skip to.
- Add
-
Add additional workflow stages to skip to.
Require Justification
- Field
- Description
- Select Question
-
Select the question on which justification will be required when the rule is triggered.
Note:To add a justification rule, make sure the Allow Justification toggle is enabled for the specific Question Type.
The toggle is available for MultiChoice and Yes/No question types. See Adding, Editing, and Deleting Questions.
To edit or move a rule
- Hover over the card of the draft template has the rule you wish to edit until the Edit Draft button appears.
- Click the Edit Draft button.
- Go to the Rules tab.
- Click the Context Menu icon of the rule you want to edit.
- On the Context menu, select Edit or Move Rule.
- Make changes as necessary. For more information, see To add a rule.
To copy a rule
- On the Context menu, select Copy.
The Copy Rule modal appears.