--- title: The Importance of Your Questionnaire description: Struggling with where to start when developing a third-party risk assessment questionnaire? Read this blog post to see why questionnaires are so important. image: https://www.blueumbrella.com/hubfs/medium-2.jpg --- [![BU Primary Logo_1. Triangle Main](https://www.blueumbrella.com/hubfs/00_Redesign2022/Blue%20Umbrella%20Branding/BU%20Primary%20Logo_1.%20Triangle%20Main.png "BU Primary Logo_1. Triangle Main")](https://www.blueumbrella.com/) [![BU-Primary White Logo](https://www.blueumbrella.com/hubfs/00_Redesign2022/Blue%20Umbrella%20Branding/BU-Primary%20White%20Logo.png "BU-Primary White Logo")](https://www.blueumbrella.com/) #### products Blue Umbrella delivers a potent combination of powerful risk management tools, innovative technology and research excellence. [Explore all products](https://www.blueumbrella.com/products) [Status](https://www.blueumbrella.com/status) For large enterprises with tens of thousands of business relationships, Status integrates all information and workflows to run a global compliance program. [Research](https://www.blueumbrella.com/research) Blue Umbrella offers tailored third-party risk intelligence reports, safeguarding organizations from regulatory or reputational risk. Insider ## The Importance of Your Questionnaire ![Blog-Section0-Header-Image-Bees](https://cdn2.hubspot.net/hubfs/5164326/Nov%202019/Phase%202/Images/Blog-Section0-Header-Image-Bees.png) Usually, the first step in most third-party risk management programs is the distribution of a **risk assessment questionnaire** to third-party vendors. These questionnaires can come in a variety of flavors depending on the third-party and the relationship you may have with them, from anti-bribery and corruption to data privacy and IT security.  Generally speaking, it's the general counsel or head of legal at most mid-size companies who oversee the development and distribution of these questionnaires, as it's a critical aspect of their overall third-party risk management program.  Most general counsels are subject matter experts in data privacy and IT security and know the important things to consider when assessing third-party risk, right?  *Right*? What we're getting at here is the fact that while [IT security](https://www.blueumbrella.com/grc/it-security) and [data privacy](https://www.blueumbrella.com/grc/data-privacy) are topic areas of concern relating to third-party compliance risk (according to our research), it's pretty rare for a head of legal to be a subject matter expert in those areas.  So when it comes time to developing or establishing a third-party risk assessment questionnaire, where do most GC's turn? They either try to find a questionnaire online, develop one internally (taking valuable time and resources) or enlist an outside expert to rubber stamp their version (at considerable cost).  If we look at the first option, finding a template questionnaire online, you could run into issues with the quality of the questionnaire you find.  Basically, when was it created and does it even cover all the important areas that should be considered?  The next option, developing a questionnaire internally, can also be challenging.  Getting consensus on what and how many questions to ask may cause friction as different internal departments may have different tolerance to risk. Finally, working with external experts to rubber stamp a risk assessment questionnaire can be a budget breaker and not always necessary as the best risk assessment questionnaires follow gold standard best practices anyway. What's a general counsel to do when it's time to develop, improve or establish the questionnaire component of a third-party risk assessment program? We think the first step should be downloading our guide on this very topic, entitled "[Third-Party Risk Management Questionnaires: What You Should Know](https://info.blueumbrella.com/instant-download-third-party-risk-management-questionnaires-guide)".  Our goal is to relieve some of the burden legal and compliance professionals face when they're at the start of their journey to establish or improve their third-party risk management program... starting with the risk assessment questionnaire.  [Insider](https://www.blueumbrella.com/insights/tag/insider) ![Blue Umbrella](https://www.blueumbrella.com/hubfs/00_Redesign2022/Blue%20Umbrella%20Branding/favicon.ico) ### [Blue Umbrella](https://www.blueumbrella.com/insights/author/blue-umbrella) Blue Umbrella is a leading provider of due diligence research and innovative third-party compliance technologies. Combining global research excellence with disruptive RegTech SaaS solutions, Blue Umbrella serves multinational corporations working in technology, manufacturing, life sciences, defense/aerospace, agriculture, energy, finance, and consumer goods as well as top-tier investment banks. With a global presence and local focus, Blue Umbrella helps compliance teams increase automation and efficiency, reduce costs, and gain critical understanding of their clients and third parties. [**](https://www.facebook.com/blueumbrellagrc) [** ](https://www.linkedin.com/company/blue-umbrella-limited/) [** ](https://twitter.com/blueumbrellagrc) ## Share post - [**](http://www.facebook.com/share.php?u=https://www.blueumbrella.com/insights/the-importance-of-your-questionnaire/) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.blueumbrella.com/insights/the-importance-of-your-questionnaire/&summary=&source=BlueUmbrella) - [**](https://twitter.com/share?url=https://www.blueumbrella.com/insights/the-importance-of-your-questionnaire/) ## Subscribe for Insights ### We'll let you know when we've published something cool. ### Other resources you might like [![](https://www.blueumbrella.com/hubfs/bu/Videos%202020/Blue%20Umbrella%20-%20Video%202%20Status%20-%20animation_1080p-thumb-1.jpeg) ](https://www.blueumbrella.com/insights/how-can-the-pharmaceutical-industry-improve-its-compliance-processes) Posts #### [How can the pharmaceutical industry improve its compliance processes?](https://www.blueumbrella.com/insights/how-can-the-pharmaceutical-industry-improve-its-compliance-processes) Regulated industries are always under scrutiny and any missteps in their processes seem to be magnified. They are also at the mercy of rapidly changing regulations which can vary among jurisdictions.... [![](https://www.blueumbrella.com/hubfs/life%20sciences%20-%20iStock-1327426565.jpg) ](https://www.blueumbrella.com/insights/what-are-the-top-5-considerations-of-life-sciences-compliance) Posts #### [What are the top 5 considerations of life sciences compliance?](https://www.blueumbrella.com/insights/what-are-the-top-5-considerations-of-life-sciences-compliance) Life sciences are under increased scrutiny from regulators and, due to COVID, have faced unprecedented challenges. This has increased pressure to remain innovative with their technology remaining... [![](https://www.blueumbrella.com/hubfs/bu/BRAND%20ASSETS-2019/Illustrations/Animation%20Placeholders/Blue%20Umbrella%20Tree_Animation%20Static%20Preview.jpeg) ](https://www.blueumbrella.com/insights/five-best-practices-for-adverse-media-monitoring) [Third-Party Compliance](https://www.blueumbrella.com/insights/tag/third-party-compliance) #### [Five Best Practices for Adverse Media Monitoring](https://www.blueumbrella.com/insights/five-best-practices-for-adverse-media-monitoring) Enterprises need to be aware of all degrees of risk that their clients and third parties may bring, ranging from a bribery allegation, to association with a sanctioned entity. Therefore, [Adverse...](https://www.blueumbrella.com/adverse-media-monitoring) ## Get Started Today! ### Blue Umbrella GRC Modular Blue Umbrella GRC software streamlines how mid-size organizations identify and communicate risk. [GET A DEMO](https://www.blueumbrella.com/grc?hs_preview=uFnmTDES-20572011632#form-scroll) ### Status For large enterprises with thousands of business relationships, Status simplifies global compliance programs. [GET A DEMO](https://www.blueumbrella.com/status?hs_preview=iYngjorY-20458594126#form-scroll) [### About ](https://www.blueumbrella.com/about) Blue Umbrella is shaking up compliance and risk management through industry-leading research, advanced technology and trailblazing software. [Learn more](https://www.blueumbrella.com/about) [Careers](https://www.blueumbrella.com/careers)   [### Products ](https://www.blueumbrella.com/products) - Client Login - [Blue Umbrella GRC](https://grc.blueumbrella.com) - [Status](https://status.eu.bluedd.com/)     - Connect - [* *](https://www.linkedin.com/company/blue-umbrella-limited) - [* *](https://twitter.com/blueumbrellagrc) ### Get started on compliance transformation. [get a Demo](https://www.blueumbrella.com/status#form-scroll) © Blue Umbrella Limited. All Rights Reserved. [Privacy Policy](https://www.blueumbrella.com/privacy-policy)[Cookie Policy](https://www.blueumbrella.com/cookie-policy) [Accessibility](https://www.blueumbrella.com/blue-umbrella-accessibility) Cookie Settings Please ensure Javascript is enabled for purposes of [website accessibility](https://userway.org)