Every vendor tiered, questioned and mapped to the controls it touches.

My work comes first, then the groups below, and only those groups start open. The All sections switch brings back the full order. A job family only arranges the sidebar, and your permissions still decide which items you see.

• 01Third parties. TPRM · Partner programs · Questionnaires

The dashboard shows Needs your attention, Overdue & at-risk, Approvals queue and Findings tracker. Your role still caps that set, and a panel you do not get is left out rather than shown as a zero.

• Third-party risk→
• Business continuity→

A job family never grants a permission, and it never changes the price. What you can approve comes from your role, and people in this family usually hold one of the roles below.

• 01Compliance Analyst. The Compliance Analyst role writes drafts, findings, risk, controls and third-party records, but it approves nothing.
• 02Risk Approver. The Risk Approver role approves risk acceptances, control effectiveness, finding closures, policies, mappings and routing decisions. It does not hold the owner’s write set, settings or examiner grants.

Whatever the role, the person who submits a decision cannot approve it. The only exception is a decision that no one else in your institution can approve. The submitter may then approve it with a recorded justification, and that override is audited. See Roles and permissions for the full model.