Configuring Modular Supplier Management Questionnaire Project Templates for Control-Based Engagement Risk Assessments

Control-based engagement risk assessment projects use modular supplier management questionnaire projects for the required assessments, which can be either internal or external (supplier-facing).

• Assessments exist as separate projects, but control-based risk assessment projects created from the Supplier Risk Engagement Project Template link to them through risk control definitions

External modular supplier management questionnaires that are used as risk assessments in control-based engagement risk assessment projects can be reused between projects, and you can allow suppliers to update them on an ongoing basis.

Internal modular supplier management questionnaires that are used as risk assessments in control-based engagement risk assessment projects are used once per risk assessment project, and recipients cannot currently edit them after the initial submission.

Each modular supplier management questionnaire project template must contain one survey document.

• Modular supplier management questionnaire project templates only supports one survey document. Do not add any other type of document, or more than one survey document, to them.

When you name the template of a modular supplier management questionnaire that you plan to use in control-based engagement risk assessments, keep in mind that the template name becomes the name of the risk assessment questionnaire created from it.

The engagement page includes a Risk Controls area that shows information about all of the engagement's required controls, including the control name (ControlName field in your site's risk control definition master data) and the name of the modular supplier management project template for the associated assessment questionnaire.

Expiration schedule

• When you set up an external modular supplier management questionnaire template, you can set it to expire and specify an expiration schedule. The expiration settings are in the Supplier Management area of the template survey document rules.

Is questionnaire required?

• This setting has no effect in control-based engagement risk assessment projects. If the answers in the engagement request trigger requirement for a control, and a modular questionnaire is defined as an assessment for that control, the questionnaire is always required in the control-based engagement risk assessment project.

Specify questionnaire type

• Set to External for external (supplier-facing) questionnaires and Internal for internal questionnaires.

Always open

• This setting only applies to external questionnaires. If you set it to Yes in an external questionnaire, the supplier can update their answers on an ongoing basis.
• This setting is ignored in internal questionnaires. Internal questionnaire recipients can currently only edit the questionnaire once, when filling it out and submitting it for the first time.

You can add project groups and members to the team of modular supplier management questionnaire project templates.

When you configure the team of modular supplier management questionnaire project templates, keep in mind the following:

• The only way to define specific recipients for internal modular supplier management questionnaires in control-based engagement risk assessment projects is by creating a project group named Internal Recipient, using that exact name, in the internal questionnaire project template and by specifying membership for that group in the template.
  • If the internal modular questionnaire project does not include any members in the Internal Recipient project group, or does not contain the Internal Recipient project group at all, the engagement risk assessment project owner becomes the recipient.

Modular supplier management questionnaire project templates projects created by the send assessment operation do not currently support buyer category assignments and do not support team member rules.