Create a vendor risk issue

Issues are created to document audit observations and remediations, or to accept any problems. Issues and tasks can be assigned directly to vendor contacts without the need for a vendor risk assessment.

Before you begin

Role required: vendor risk assessor

Procedure

  1. Navigate to Vendor Risk > Issues > Create New .
  2. Fill in the fields on the form, as appropriate.
    Table 1. Vendor Risk Issue
    Field Description
    Number Read-only field that is automatically populated with a unique identification number.
    State
    • New
    • Analyze
    • Respond
    • Review
    • Closed
    Vendor The vendor with the issue.
    Priority Priority for this issue:
    • 1 - Critical
    • 2 - High
    • 3 - Moderate
    • 4 - Low
    • 5 - Planning
    Assessment The assessment assigned to the issue.
    Assessment group A group assigned to the issue.
    Visible in portal Indicates if issues is visible to the vendor in the Vendor Portal.
    Assigned to The user assigned to the issue.
    Vendor Contact The vendor contact associated with this issue.
    Created by User that created the issue.
    Created The time when the issue was created.
    Updated The time when the issue was updated.
    Watch list Users that will be notified when any changes are made to the issue.
    Short description Brief description of the issue.
    Description More detailed description of the issue.
    Notes and Comments
    Work notes Information about how to resolve the issue, or steps already taken to resolve it, if applicable. Work notes are visible to users who are assigned to the issue.
    Additional comments (Customer visible) Public information about the issue.
    Recommendations
    Recommendation The recommended action to resolve this issue.
    Explanation An explanation of the recommended action.
    Issue Schedule
    Duration Estimated amount of work time. Calculated using the Planned state date and Planned end date.
    Actual duration Estimated amount of work time. Calculated using the Actual state date and Actual end date.
    Planned start date Date and time that work on the issue is expected to begin.
    Actual start date Time when work began on this issue
    Planned end date Date and time that work on the issue is expected to end.
    Actual end date Time when work ended on this issue.
  3. Click Submit.