MPG Governance Module

Governance Questionnaires & Assessment Software

Design, distribute, score, and resolve governance questionnaires and due diligence assessments — all in one connected workspace.

What It Is

The Questionnaires & Assessments module is MPG's central engine for collecting, evaluating, and acting on governance information from internal teams and external parties. It replaces fragmented email threads, spreadsheets, and standalone survey tools with a structured, auditable workflow that connects questionnaire design to risk scoring, findings, remediation, and evidence.

Whether you are sending a vendor due diligence questionnaire, conducting an annual compliance attestation, or running a cybersecurity risk assessment, the module provides configurable templates, conditional logic, automated scoring, and a full audit trail — so every response is traceable from question to decision.

Unlike generic survey tools, MPG questionnaires are built specifically for governance and oversight. Every question can be mapped to a risk, a control, a policy, or a compliance obligation, creating a connected governance knowledge graph rather than a disconnected data dump.

Who It Is For

Compliance officers managing regulatory assessments and attestations
Risk managers conducting vendor and third-party due diligence
Procurement teams evaluating supplier risk before onboarding
Internal audit teams testing control effectiveness
Operations teams responsible for periodic reviews and monitoring
Vendor managers overseeing supplier compliance and performance

Problems It Solves

✕Questionnaires scattered across email, spreadsheets, and point tools with no central repository
✕No visibility into which assessments are overdue, incomplete, or scored poorly
✕Manual scoring and evaluation that is inconsistent and error-prone
✕No connection between questionnaire responses and risk registers, controls, or findings
✕Difficulty reusing previous responses and institutional knowledge
✕No audit trail showing who responded, who reviewed, and what decisions were made
✕Inability to benchmark counterparties against each other or over time

How MPG Solves Them

MPG provides a unified questionnaire builder with reusable question libraries, conditional logic, and pre-population from previous responses. You can design a questionnaire once and distribute it to hundreds of counterparties, with automated reminders, escalations, and deadline tracking.

Responses are automatically scored using configurable risk scoring rules, with red flags detected and surfaced for review. Findings are linked directly to risks, controls, and remediation actions, closing the loop from question to decision to evidence.

Every assessment generates a complete audit trail — who was asked, what they said, who reviewed it, what score was assigned, what finding was raised, and what remediation was required. This audit trail is critical for regulatory examinations, internal audits, and board reporting.

Key Features

Drag-and-drop questionnaire builder with sections, conditional logic, and question types
Reusable question library with industry-standard templates
Automated risk scoring with configurable weightings and thresholds
Red flag detection and escalation workflows
Pre-population from previous responses and answer library
Bulk distribution to multiple counterparties with individual tracking
Automated reminders and overdue escalations
Multi-stage review with reviewer assignment and approval workflows
Findings management linked to risks, controls, and remediation actions
Evidence collection and document attachments per question
Assessment lock and version history for audit integrity
Benchmarking and trend analysis across counterparties and cycles

Reporting Studio & Governance AI

Every record in this module can be reported on

The Reporting Studio turns what your workspace records into governed figures — compiled from your own records, approved before anything leaves the workspace, and answered with citations.

Governed measures

Each figure is compiled from the module's own records and carries the instant it was read at and what it leaves out.

Approval before release

A report pack leaves the workspace only once the approval chain its report type requires has decided on it.

Answers you can check

The assistant points to the records each answer rests on, and it never approves, publishes, releases or deletes anything.

See how Reporting Studio works

Workflow

1

Design or select a questionnaire template from the library

2

Configure risk scoring rules, red flags, and review stages

3

Distribute to counterparties individually or in bulk with deadlines

4

Counterparties respond online with automated reminders

5

System auto-scores responses and flags risks for review

6

Reviewers evaluate findings, assign remediation, and approve decisions

7

Findings link to risk register, controls, and evidence

8

Generate reports and audit trails for stakeholders and regulators

Use Cases

Annual vendor due diligence questionnaires for critical suppliers
Cybersecurity risk assessments for third-party vendors
Regulatory compliance attestations for internal teams
ESG and sustainability assessments for supply chain partners
Operational due diligence for investment managers
Control self-assessments for internal audit cycles

Related Governance Risks

Undetected vendor or third-party risk due to incomplete assessments
Inconsistent scoring leading to misclassified risk levels
Regulatory findings due to missing or inadequate due diligence evidence
Operational failures from unaddressed assessment findings

Related MPG Modules

Frequently Asked Questions

What types of questionnaires can I create with MPG?

MPG supports any governance questionnaire including vendor due diligence, cybersecurity assessments, compliance attestations, ESG assessments, operational due diligence, and control self-assessments. The builder is fully configurable with custom question types, conditional logic, and scoring rules.

Can I reuse responses from previous assessments?

Yes. MPG includes an Answer Library that stores previous responses and allows pre-population of new questionnaires. This saves time, ensures consistency, and builds institutional knowledge over time.

How does automated risk scoring work?

Each question can be assigned a weight and risk mapping. When responses are submitted, the system calculates a score based on your configurable rules, identifies red flags, and surfaces high-risk areas for reviewer attention.

Can I distribute questionnaires to external parties?

Yes. You can send questionnaires to any counterparty via email with a secure link. Recipients do not need an MPG account to respond. The system tracks completion, sends reminders, and escalates overdue assessments automatically.

Is there an audit trail for regulatory examinations?

Yes. Every assessment maintains a complete audit trail including who was asked, what was responded, who reviewed, what score was assigned, what findings were raised, and what remediation was completed. This is exportable for regulators and auditors.

Can I benchmark counterparties against each other?

Yes. MPG provides benchmarking and trend analysis across counterparties, assessment cycles, and time periods, helping you identify outliers and track improvement over time.

Ready to strengthen your governance with Governance Questionnaires & Assessment?

Join organizations using My Premium Governance to transform their governance, oversight, and compliance operations.