Third-Party Impact Assessment Questionnaire Form
Evaluate a third party’s potential business, data, security, and operational impacts.
Assessment and Third-Party Details
Third Party or Organization Name
*
Service or Product Being Assessed
*
Assessment Date
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Impact Review
Business function or team affected
*
Data handled or accessed
*
Public business information
Internal business information
Customer or user information
Employee or workforce information
No data access
Third-party impact ratings
*
Rows
1 - Low
2
3
4
5 - High
Service criticality
1
2
3
4
5
Data sensitivity
6
7
8
9
10
Security risk
11
12
13
14
15
Operational disruption
16
17
18
19
20
Recovery readiness
21
22
23
24
25
Key risks, safeguards, or assessment notes
Continuity and Recommendation
Does the service have a documented continuity or recovery plan?
*
Yes
No
Not known
Overall impact level
*
Low
Medium
High
Critical
Assessment recommendation and follow-up actions
*
Submit Assessment
Should be Empty: