Due Diligence and Ongoing Monitoring

This message was posted by a user wishing to remain anonymous

I'm working on revamping our due diligence request list to be sent to potential vendors and running into brain road blocks on what the initial paragraph should say.  

Is anyone willing to share their VDD request list they send out, even if its just the initial opening statement?

Here is ours- we use a GRC portal that they can respond and upload in. I have XXXXXX where the name of the portal goes. Hope it helps! 

Hello. 

(Insert Org Name here) is utilizing the XXXXX web portal to conduct a due diligence review of your organization for products/services that are or may be used by (Insert Org Name Here). Please log into XXXXXXX to complete and submit this assessment (questions and upload the requested documents). (Insert Org. Name Here)'s Third Party Risk Management group will be your point person during this review. We are requesting that all responses and documentation be provided through XXXXXXX no later than 2 weeks from today. Within the next 2 business days, please confirm receipt of this request via email to (INSERT MAILBOX ADDRESS HERE) 

------------------------------
Jenn Wilkinson
Vice President
Third Party Risk Management
Cenlar FSB
jwilkinson@cenlar.com
------------------------------