Vendor / Third-Party Risk Assessment Register

A third-party risk assessment register that runs the full vendor lifecycle in one tab, links issues and remediation actions by vendor ID, and separately tracks fourth-party and subprocessor exposure with flow-down obligations.

Ideal for compliance and procurement teams managing a growing vendor and subprocessor risk program.

Contents:

1. Instructions
2. Dashboard (Vendor Risk Posture)
3. Vendor Risk Assessment Register (Full Lifecycle)
4. Issues & Remediation Log
5. Fourth Parties / Subprocessors Register
6. Reference (Scoring Model & Lists)
7. Field Dictionary