S
Simpleasyty
Help Center — Third-Party Risk
GETTING STARTED
IntroductionQuick start
CREATE A SCHEMA
Create a schema from a templateCreate a schema from scratch
SCHEMA TEMPLATES
Security Risk RegisterISO 27001 Document ControlSOC 2 Evidence RegisterPolicy ManagementThird-Party RiskData ClassificationApplication PortfolioControlled DocumentArchitecture Decision RecordInformation Asset RegisterBusiness Continuity RegisterGDPR Processing Activity
IMPORT
Import a JSON or YAML schema packageImport Page Properties
FIELD TYPES
Schema field typesText fieldsNumber fieldsYes / No fieldsSingle choice fieldsDate / Time fieldsEmail fieldsURL fieldsConfluence reference fieldsList fieldsField group fields
MANAGE SCHEMAS
Manage schemasIndexed fields and filtersSchema permissions
CAPTURE DATA ON PAGES
Capture metadata on a pageCapture, validate and repair metadata
CREATE REPORTS
Build a Metadata ReportConfigure report filters and viewer controls
STORAGE & PRIVACY
Data residencyStorage in ForgeRetention and deletion
COMPLIANCE
Compliance workflowsMetadata, history and revisions
ADMINISTRATION & TROUBLESHOOTING
Import and exportSchema reconciliation and processesSecurity, storage and limitsTroubleshoot schemas, filters and reports

SCHEMA TEMPLATES

Third-Party Risk

Create one view of vendor exposure, security review and renewal so important supplier decisions are easier to follow.

A vendor's importance, access to data and security-review status can change while a contract remains in place. This template brings those facts together with ownership and renewal dates so teams can review suppliers before decisions become urgent.

Fields

Supplier reviews are more useful when the business importance of a service sits beside its data exposure and upcoming decisions. This structure keeps those considerations in one place.

FieldTypeWhat it captures
VendorRequired · IndexedTextSupplier of the service or application.
ServiceRequired · IndexedTextService delivered by the vendor to the organization.
CriticalityRequired · IndexedSingle choiceHow important the vendor or service is to operations.Choices: Low, Medium, High, Critical
Data accessIndexedSingle choiceLevel or category of information a vendor can access.Choices: None, Internal, Confidential, Personal data
Risk levelRequired · IndexedSingle choiceOverall severity assigned to the vendor risk.Choices: Low, Medium, High, Critical
Security reviewIndexedSingle choiceProgress and outcome of the vendor's security assessment.Choices: Not started, In progress, Approved, Rejected
Contract ownerRequired · IndexedConfluence userPerson responsible for the vendor relationship and contract.
Renewal dateIndexedDateDate of the vendor contract's next renewal.