An Inherent Risk Questionnaire (IRQ) is a standardized intake tool used to determine a vendor’s baseline level of risk and business criticality before reviewing any controls. It is completed by the internal team requesting the vendor and gathers information about the vendor’s role in business operations, the data involved, and the potential impact of service failure.
Inherent Risk Questionnaire (IRQ)
How ProcessUnity Helps You
ProcessUnity integrates the Inherent Risk Questionnaire into the vendor request process, enabling teams to compare internally attested IRQ responses with externally validated Exchange data. This provides an additional layer of assurance and enhances the process of tiering and prioritizing vendors.
