Create a task for an internal user

Create an internal task to assign follow-up work to an internal user, rather than to a third-party contact, as part of your organization's third-party risk processes.

Before you begin

Role required: sn_vdr_risk_asmt.vendor_assessor

About this task

Tasks are commonly used to track follow-up work with a third-party contact. For information about creating and managing tasks for third-party contacts, see Create a task for a third party or engagement and Manage a task for a third party or engagement. An internal task is a related but separate record type that assigns follow-up work to an internal user instead of a third-party contact. Internal tasks aren't visible to third-party contacts and don't appear in the third-party portal.

Internal tasks can be automatically generated and assigned to a specified respondent, depending on how your organization configures its due diligence and risk processes. For example, the task can be assigned to the person who submitted a request, so the respondent can provide additional information before the process continues.

When an internal task is submitted to a respondent, the respondent is automatically granted the internal task responder role required to complete the task. For more information about this role, see Roles in Third-party Risk Management.

You can assign an internal task to any internal user in your organization. The respondent completes the task from the Employee Center, under GRC tasks.

Procedure

Navigate to Workspaces > Vendor Management Workspace, select the list icon [Omitted image "ws-list-icon.png"] Alt text: and then navigate to Internal tasks > All tasks.
Select New and fill in the form.

For descriptions of all these fields, see Create new third-party risk task form.
Select Save.

What to do next

The assigned respondent completes the follow-up work from the Employee Center, under GRC tasks, and updates the task state as they progress. Monitor and update the task in Manage a task for a third party or engagement.

The respondent can also view assigned internal tasks in the GRC Portal.

Internal tasks transition through the following states as they are created, assigned, completed, and reviewed:

Open — Task is created and awaiting assignment to a respondent.
Submitted to responder — Task is assigned to a respondent; the respondent can now access and complete it. The respondent is automatically granted the internal task responder role.
Review — Task is submitted for review by the assessor or due diligence request owner.
Closed — Task review is complete and the task is closed.

Related topics

Create new third-party risk task form

Roles in Third-party Risk Management

Create a task for a third party or engagement

Manage a task for a third party or engagement

title	Create a task for an internal user
description	Create an internal task to assign follow-up work to an internal user, rather than to a third-party contact, as part of your organization's third-party risk processes.
locale	en-US
canonical_url	https://www.servicenow.com/docs/r/governance-risk-compliance/third-party-risk-management/tprm-internal-tasks.html
release	brazil
product	Third-party Risk Management
classification	third-party-risk-management
topic_type	task
last_updated	2026-09-14
reading_time_minutes	3
breadcrumb	Assess third-party riskThird-party Risk ManagementGovernanceRiskand Compliance