Could a Third Party Risk Management be developed at JIRA?

Question

I'm interesting in develop /configure a Third Party program in which could provides for:

* management of a Vendor Life cycle, specifically: the general vendor information, Due Diligence, continuous monitoring and termination if applicable in separate screens for each vendor.

* Identify inherent risk through specific criterias the inherent risk (risk to make business with vendor)

* document the above mentioned phases in different screens as well upload evidence that support as an example the due diligence and monitoring

* Considering the evidence capture could configure a residual risk of each vendor evaluated.

Ankita Chopra_oy4oia · Answer

Yes, a Third Party Risk Management process can be developed in Jira, especially if an organization already uses Jira for project or workflow management.

Jira allows teams to create custom issue types, workflows, and automation rules, which makes it possible to manage vendor onboarding, risk assessments, approvals, and compliance tracking in one system. Companies can treat each vendor as a record or ticket where security reviews, documents, and risk findings are tracked over time.

For smaller teams, Jira can work as a flexible starting point for managing vendor risks without immediately investing in dedicated tools. Tasks like assigning risk reviews, setting reminders, and maintaining audit history can be handled through Jira dashboards and integrations.

However, Jira is not originally designed as specialized Third Party Risk Management Software. It may require additional plugins or manual setup to handle advanced features such as automated risk scoring, continuous vendor monitoring, or regulatory reporting.

In simple terms, Jira can support third-party risk management workflows, but organizations with complex vendor environments often move to purpose-built solutions as their risk management needs grow.

Monika Isak · Answer

Hi Wanda,

Great idea, and it is completely feasible.

You can even start using Jira Service Desk for sending out your vendor qualification requests and perform the vendor assessment analysis using the SoftComply Risk Manager Plus.

The Risk Manager Plus allows you to build "questionnaire type" risk models and help you automate the risk assessments (inherent and residual). And you will be able to link other tasks in Jira or necessary documentation to each specific risk.

If you are interested in talking to us further, you are welcome to set up a call by using this link.

Cheers!

Monika

Ste Wright · Answer

Hi @Wanda Crespo Polanco

You certainly can develop this kind of App!

I would probably do some market research first though, check what might already exist in this space on the Marketplace.

In terms of building an App - check out these help pages as good starting points:

* DC: https://developer.atlassian.com/server/jira/platform/getting-started/
* Cloud...* Forge: https://developer.atlassian.com/cloud/jira/platform/getting-started-with-forge/
* Connect: https://developer.atlassian.com/cloud/jira/software/getting-started/

Ste