Tables installed with Third-party Risk Management
Several types of tables are installed with the Third-party Risk Management application.
Tables installed with Third-party Risk Management
| Table Name (System Name) | Description |
|---|---|
| Company [core_company] | Stores all third-party entities (vendors, suppliers, partners). |
| Engagement [sn_vdr_risk_asmt_vendor_engagement] | Represents a specific engagement/relationship with a third party. |
| Internal assessment [sn_vdr_risk_asmt_internal_assessment] | Stores internal risk assessments such as tiering and inherent risk questionnaires (IRQs). Extends: Tiering assessment [sn_vdr_risk_asmt_vdr_tiering_assessment]. |
| Tiering assessment [sn_vdr_risk_asmt_vdr_tiering_assessment] | Stores risk tiering assessments for third parties or engagements. |
| External assessment [sn_vdr_risk_asmt_assessment] | Stores external risk assessments sent to third parties or engagements. Extends: Planned task [planned_task]. |
| Assessment template [sn_vdr_risk_asmt_template] | Defines templates for assessments (internal/external). Extends: Application File [sys_metadata]. |
| Third-party risk issue [sn_vdr_risk_asmt_issue] | Tracks issues identified during assessments or engagements. Extends: Issue [sn_grc_issue]. |
| Third-party risk task [sn_vdr_risk_asmt_task] | Tracks remediation or follow-up tasks related to issues or assessments. Extends: Planned task [planned_task]. |
| Vendor contact [vm_vdr_contact] | Stores contact information for third-party representatives. Extends: User [sys_user]. |
| Risk intelligence score [sn_vdr_risk_asmt_security_score] | Stores risk intelligence scores from external providers. |
| Event-driven management rule [sn_tprm_dd_generation_rule] | Defines rules for auto-generating assessments or questionnaires. |
| Event-driven management history [sn_tprm_dd_rule_execution_history] | Tracks execution history of event-driven management rules. |
| Engagement risk scoring rule [sn_vdr_risk_asmt_engagement_risk_scoring_rule] | Defines rules for scoring engagement risk. Extends: Risk scoring rule [sn_vdr_risk_asmt_risk_scoring_rule]. |
| Engagement level risk rating [sn_vdr_risk_asmt_engagement_level_rating] | Stores calculated risk ratings at the engagement level. |
| Third-party risk scoring rule [sn_vdr_risk_asmt_vendor_risk_scoring_rule] | Defines rules for scoring third-party risk. |
| Component criteria [sn_vdr_risk_asmt_component_criteria] | Defines criteria for scoring components (for example, subsidiaries, engagements). |
| Component [sn_vdr_risk_asmt_component] | Represents assessable entities (subsidiaries, engagements, and so on). |
| Risk area criteria [sn_vdr_risk_asmt_risk_area_criteria] | Defines criteria for risk areas/domains. Extends: Type criteria [n_vdr_risk_asmt_type_criteria]. |
| Third-party risk area definition [sn_vdr_risk_asmt_risk_area_definition] | Defines types of risk to assess (for example, security, financial). Extends: Type definition [sn_vdr_risk_asmt_type_definition]. |
| Usage analytics activity [sn_vdr_risk_asmt_ua_activity] | Tracks managed activities for licensing and analytics. |
| Assessment type [sn_vdr_risk_asmt_type] | Defines assessment types. Extends: Application File [sys_metadata]. |
| Component definition [sn_vdr_risk_asmt_component_definition] | Defines component types. Extends: Type definition [sn_vdr_risk_asmt_type_definition]. |
Tables installed with Third-party Risk Due diligence tables
| Table Name (System Name) | Description |
|---|---|
| Approval [sn_tprm_approval] | Tracks approval actions and states for each due diligence request. |
| Third-party element classification [sn_tprm_dd_element_classification] | Stores classification data for third-party elements. Used for categorization and compliance. |
| Engagement component [sn_tprm_dd_engagement_component] | Stores component records related to third-party engagements. |
| Engagement component criteria [sn_tprm_dd_engagement_component_criteria] | Defines criteria for evaluating engagement components. |
| Third-party element [sn_tprm_dd_element] | Stores records of third-party elements involved in due diligence. |
| Engagement component definition [sn_tprm_dd_engagement_component_definition] | Defines types and structure of engagement components. Extends: Type definition [sn_vdr_risk_asmt_type_definition]. |
| Engagement component level risk rating [sn_tprm_dd_engagement_component_level_rating] | Stores calculated risk ratings at the engagement component level. |
| Event-driven management rule [sn_tprm_dd_generation_rule] | Defines rules for auto-generating assessments or questionnaires. |
| Engagement entities [sn_tprm_dd_m2m_engagement_entity] | Maps engagement records to associated entities. |
| Question to questionnaire [sn_tprm_dd_m2m_question_to_questionnaire] | Maps individual questions to questionnaire templates. |
| Risk intelligence report request [sn_tprm_dd_risk_intel_request] | Captures requests for external risk intelligence reports. |
| Risk intelligence request type [sn_tprm_dd_risk_intel_request_type] | Defines types of risk intelligence requests. |
| Event-driven management history [sn_tprm_dd_rule_execution_history] | Tracks execution history of event-driven management rules. |
| Due diligence request [sn_tprm_dd_request] | Stores all due diligence requests (onboarding, reassessment, offboarding) and tracks workflow state. |
| Assessment template to document request template [sn_tprm_dd_m2m_asmt_template_doc_req_template] | Maps assessment templates to document request templates. |
For information on tables installed with the Digital resilience third-party registers application, see Tables installed with Digital resilience third-party registers.