1. Information Security Assessment: Detailed evaluation of information security controls, required when the third party handles sensitive data or requires system access

2. Business Continuity Assessment: Assessment of business continuity and disaster recovery capabilities, needed for critical service providers

3. Financial Viability Analysis: In-depth financial analysis, required for key suppliers or high-value contracts

4. Environmental Impact Assessment: Evaluation of environmental risks and compliance, needed for suppliers with significant environmental impact

5. Supply Chain Assessment: Analysis of the third party's supply chain risks, relevant for manufacturers or distributors

6. Privacy Impact Assessment: Detailed privacy risk assessment, required when the third party handles personal information

1. Risk Assessment Matrix: Detailed matrix showing risk evaluation criteria and scoring methodology

2. Due Diligence Checklist: Comprehensive checklist of all due diligence items reviewed

3. Control Testing Results: Detailed results of control testing and evaluation

4. Compliance Certificates: Copies of relevant compliance certificates and attestations

5. Risk Treatment Plan: Detailed plan for addressing identified risks including timelines and responsibilities

6. Monitoring Schedule: Schedule of ongoing monitoring activities and reporting requirements

7. Key Performance Indicators: List of KPIs for monitoring third party performance

8. Document Register: Register of all documents reviewed during the assessment