Expanded Third-Party Risk Profile Input & Tracking

To streamline how users complete and maintain their Risk Profile, we’d like to extend the current functionality around the current built-in Risk profile questions.

Add a Comment Field

A small comment section for each Risk Profile would allow users to provide additional context or clarification.
This is useful for:

• Explaining decisions behind certain answers

• Adding nuance that isn’t captured by structured fields

• Internal communication about Third-parties

3. “Filled In By” + Date

To increase transparency and accountability, the system should automatically capture:

• Who completed/updated the Risk Profile

• On which date the action was performed

This supports auditability and aligns with common governance requirements.

4. Change Tracking

Each update to the Risk Profile should be logged:

• What changed

• When it changed

• Who made the change

This provides a clear historical overview and helps teams trace developments in their risk posture over time.

Would this be helpful in your workflows? Let us know by liking or commenting on this post!