Skip to content
Third-party \(external\) risk assessment management › Reference › Third-party Risk Management › Governance › Risk › and Compliance
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Assessment metric type form

Use the assessment metric type form to capture all the information that you need to create a questionnaire template using the Third-party Risk Management application. As a third-party risk admin, you can create a questionnaire template.

FieldDescription
NameThe name of the template.
Third-party risk areaSelect the third-party risk domain that applies to the type of third party that will receive the questionnaire or document request. For example, if you select the Security risk domain, then only third parties that are assigned that risk domain will receive the questionnaire or document request. For more information, see Define a third-party risk domain.
Third-party signature requiredOption to require the third party's primary contact to provide an electronic signature in the Third-party portal.Note: You can use electronic signatures to certify that the third-party contact has successfully reviewed and approved the questionnaire responses or document request.
Reviewer signature requiredOption to require the reviewer to review the validity of the assessment responses and provide an electronic signature as final approval.
DescriptionA description for the template.
Include previous responses

Option to pre-populate the questionnaire with responses from a completed questionnaire (state is Complete).

Important: If you have the TPR assessor [sn_vdr_risk_asmt.vendor_assessor] role, you can override the option that is specified in the questionnaire template while editing a questionnaire.

The entry in the Third-party portal notifies the third-party contact that responses were copied. The notification includes a link to the assessment that supplied the responses and its last updated date.

  • The responses are populated when the new questionnaire is submitted to the third-party contact.
  • The source questionnaire must be based on the same template as the current questionnaire.
  • The responses are populated from the most recently completed questionnaire.
  • Answers of the attachment, duration, and signature type aren’t copied.
  • The setting can’t be changed after the questionnaire is sent to the third party.

To specify the maximum age for source questionnaires, configure the Maximum age for reusing responses sn_vdr_risk_asmt.max_age_for_questionnaire_reuse system property. See Configure TPRM properties.

Parent Topic:Third-party (external) risk assessment management

Related topics

Create a questionnaire or document request template

Create a questionnaire or document request template using the Designer

Assessing your third-party risk