External assessments are completed by a user outside of your organization, such as the primary supplier contact or all of the supplier's contacts (for new questionnaires) or the supplier contact who previously submitted the questionnaire (for questionnaire updates).
Internal assessments are completed by a user within your organization, such as members of the questionnaire project’s Internal Recipient group or, if that group is empty or is not present in the project, members of the Project Owner project group of the engagement risk assessment project from which the internal assessment was sent.