Third-Party Risk Management Settings

You can manage settings for the Third-Party Risk Management product in Global Settings. Third-Party Risk Management settings control Vendorpedia synchronization alerts, vendor-specific email behavior and branding, default statuses for assessment-based engagements, and invited-user inventory visibility.

To configure Third-Party Risk Management Settings

  1. Click the gear icon in the upper right-hand corner to access Global Settings.
  2. On the Global Settings menu, select to Third-Party Risk Management > General. The Third-Party Risk Management screen appears.

  3. Customize the settings as necessary.


    Object Settings

    Field

    Description

    Vendor settings

    Enable Alerts for Vendorpedia Sync Updates

    When this setting is enabled, alerts will be displayed when connected vendors receive automatic updates from Vendorpedia.

    Send Vendor Specific Emails

    Enable this setting to allow vendor-specific emails to be sent from the Third-Party Risk Management module. If enabled, the Use Email Branding Settings setting becomes available.

    Note:

    If enabled, vendor-specific emails will be sent anytime an assessment-related notification is generated and the primary record of the assessment is a vendor or engagement.

    Use Email Branding Settings

    Enable this setting to use the sender's name configured on the Branding tab on the Email screen for all vendor-specific emails rather than the user email that triggered the event. To access the Email screen, select Email and Branding > Email Templates and Branding on the Global Settings menu.

    Note:

    This setting is only available if the Send Vendor Specific Emails setting is enabled.

    Engagement settings

    Default Status for Assessment-based Engagement Creation

    Select the default status for new engagement records created via an assessment. The options are Pending and Active.

    Status Description

    The description of the default status for new engagement records based on the option chosen in the Default Status for Assessment-based Engagement Creation field.

    Regulatory settings

    Allow attributes and reports related to DORA

    Attributes related to DORA will be visible and editable within vendor details, contracts, engagements and activated in the attributes manager. When toggled off, these attributes will be hidden but will published in reports.

    Access control

    Access control override for invited user inventory drop-down visibility

    Enable this setting to prevent invited users from viewing and selecting inventory records from drop-down fields when answering assessment questions.

    If this setting is disabled, which is the default behavior, invited users can continue to view and select inventory records from drop-down fields in assessments.

    If this setting is enabled, invited users can continue answering assessment questions as usual, but inventory drop-down questions that require selecting from a list of inventory records are blocked.

    This setting is also available in Data Mapping Automation, and enabling it in either location reflects in both.
  4. Click the Save button.