1. Data Protection Impact Assessment: Required when the third party relationship involves significant personal data processing under GDPR

2. Financial Stability Analysis: Detailed financial risk assessment, particularly important for critical suppliers or high-value contracts

3. Business Continuity Assessment: Evaluation of business continuity and disaster recovery capabilities, essential for critical service providers

4. Information Security Assessment: Detailed IT security evaluation, required when the third party has access to sensitive systems or data

5. Environmental Impact Assessment: Required when the third party's services have significant environmental implications

6. Subcontractor Assessment: Evaluation of fourth parties when the third party uses significant subcontractors

7. Industry-Specific Compliance: Additional compliance requirements based on specific industry regulations

1. Schedule A - Risk Assessment Matrix: Detailed risk scoring matrix and methodology

2. Schedule B - Compliance Checklist: Detailed regulatory compliance verification checklist

3. Schedule C - Control Assessment Results: Detailed findings from control testing and evaluation

4. Schedule D - Interview Records: Documentation of key interviews and information gathering sessions

5. Schedule E - Document Review Log: List of documents reviewed during the assessment

6. Appendix 1 - Technical Assessment Results: Detailed technical testing results and findings

7. Appendix 2 - Risk Treatment Action Plan: Detailed implementation plan for recommended controls

8. Appendix 3 - Monitoring Procedures: Detailed procedures for ongoing risk monitoring

9. Appendix 4 - Supporting Evidence: Copies of certificates, audit reports, and other supporting documentation