Scheduling ecosystem assessments

The Scheduler in 3rdRisk allows users to automate and manage third-party risk assessments with flexibility and scale. This guide walks you through setting up and using the Scheduler, from access configuration to scheduling assessments. You can also watch the video tutorial. 

1. Setting access rights

To use the Scheduler, ensure you have the appropriate permissions:

• Go to Configuration > Roles and select the relevant role.
• Scroll to Ecosystem > Ecosystem assessment planning permissions and enable options to create, update, archive, and delete schedules.
• Save changes and refresh the page. The Scheduler and Calendar options should now be visible under Tomorrow and beyond.

2. Defining default reviewers

Assign reviewers for different questionnaire domains:

• Navigate to Content > Questionnaires to access the template repository.
• Select an assessment template, then choose View questionnaire and assign reviewers.
• Define reviewers by domain (e.g., security, privacy) to ensure assessments are sent to the correct department upon completion.

Tip: Updating a reviewer in the template will automatically update all scheduled assessments.

3. Using the Scheduler

The Scheduler provides multiple entry points to initiate assessments:

• From Assessments > Ecosystem > Overview: Select Initiate assessment to start a new assessment.
• From Third Parties > Third Party Catalogue: Select a third party, then choose Actions > Initiate Assessment.
• Bulk Action: Select multiple third parties, then choose Bulk actions > Initiate Ecosystem Assessments to schedule assessments in bulk.

Once you’ve initiated the Scheduler, proceed through these five steps:

1. Third-party selection: Choose the third parties for assessment.
2. Settings: Define the assessment name, description, and assign a due date interval.
3. Contract selection: Choose relevant contracts from the contract catalogue.
4. Questionnaire selection: Select appropriate questionnaires for each third party.
5. Schedule setup: Set the execution frequency (e.g., annually) and specific dates.

4. Scheduling recurring assessments

Define recurring assessment intervals and schedule details:

• In step 5 ‘Schedule’, set whether the assessment should execute immediately or follow a specific schedule.
• For recurring assessments, choose a frequency (e.g., every 18 months) and specify an end date if applicable.
• Save your settings to add the assessment batch to the Scheduler’s Calendar.

5. Updating scheduled assessments

To modify an existing scheduled assessment:

• Go to Tomorrow and Beyond > Calendar, locate the assessment batch and click on it, select Edit, and adjust as needed (e.g., add a new third party or update questionnaires).
• Save the updated schedule. Changes will apply to all future assessments within the batch.

Conclusion

If you have questions or need further guidance, please reach out for support or request a live demo to explore this feature in more detail. The Scheduler is designed to streamline your third-party assessment process, saving time and ensuring consistency across your risk management efforts.