TPRM Home page
Summarize
Summary of TPRM Home page
The TPRM Home page in the Vendor Management Workspace offers a centralized view of key risk information related to third-party relationships. It provides TPR managers and assessors with important reports and quick access to essential actions for managing third-party risk efficiently.
Show less
Accessing the TPRM Home page
To open the Home page, navigate to Workspaces > Vendor Management Workspace, then select the Risk tab and click the home page icon. This interface presents summarized risk data and actionable options.
Key Features
- Third-party risk overview: Displays risk metrics such as engagement counts by risk rating tiers and average risk scores by risk domains. Users can click any number to drill down into detailed lists of third parties or engagements, export data, or initiate new engagement requests.
- Quick actions: Enables users to rapidly create and manage key records, including:
- Third party records: Set up data and contact information for potential partners.
- Engagements: Define risk assessments related to the products or services provided by third parties or their subsidiaries.
- Internal assessments: Conduct due diligence or ongoing risk monitoring that can influence questionnaires sent externally.
- External assessments: Initiate the third-party risk assessment lifecycle.
- Issues and tasks: Create issues to track risk concerns and tasks to ensure responses from internal users or third parties during due diligence.
- Third-party population overview: Visualizes the distribution of engagements by risk tiers and highlights top risk areas based on defined risk domains (e.g., security risk, financial risk). These risk domains help categorize and focus the risk assessment efforts.
- Issues by priority: Shows counts and priorities of open issues, allowing users to quickly identify and address critical risk concerns by linking directly to issue details.
- Fourth-nth party overview: Provides counts and classifications of fourth parties and their sub-parties linked to third parties or engagements, distinguishing between known and unknown entities for comprehensive risk visibility.
Practical Benefits for ServiceNow Customers
This Home page empowers your risk teams to monitor third-party risks effectively through real-time dashboards and streamlined workflows. By leveraging quick creation tools and detailed risk summaries, you can accelerate due diligence processes, prioritize risk mitigation efforts, and maintain comprehensive oversight of your third-party ecosystem, including extended supply chain risks from fourth parties.
The home page displays reports of important risk information and provides quick access to actions for TPR managers and TPR assessors.
Accessing the page
To open the Home page in the Vendor Management Workspace, select and on the Risk tab select the home page icon 
.
- Third-party risk overview
Select any number in a box to open the associated list of third parties or engagements.
After you open a list, you can select Export to export the data or select New to create a new engagement request.
- Quick actions
- Create a third party record. Set up the key data and contact information for a third party that your organization will possibly engage.
- Create an engagement. Define an engagement so that you can assess the risks that are associated with the services or products offered by a third party. Engagements can also represent the products or services that are provided to the parent third party, either directly or from departments, partners, or subsidiaries that you can also assess for risk.
- Create an internal assessment. Create an internal assessment as part of a due diligence request or ongoing risk monitoring using Third-party Risk Management. An internal assessment can affect which questionnaires are later sent to the third party or engagement. See Create an internal assessment.
- Create an assessment and initiate the third-party risk assessment life cycle. See Create an external assessment.
- Create an issue to help ensure that your concerns about a third party or engagement are remediated. See Create an issue for a third party or engagement.
- Create a task to help ensure that a user at your organization or the third-party contact responds to your concerns about questionnaire responses or requested documents during the due diligence process. See Create a task for a third party or engagement.
- Third-party population overview
- Risk rating by risk tiers: The number of engagements at each risk rating for each third-party risk tier. See Set up risk rating scales for scoring.
- Top risk areas:
The average risk score for engagements that are associated with each risk domain that you’ve defined.
Note:Risk domains are called "risk areas" in some platform applications.A risk domain defines the type of risk to assess for a third party. For example, you might want to assess a data-management third party in terms of security risk and a bank in terms of financial risk. Security risk and financial risk are risk domains. Some platform applications refer to risk domains as "risk areas." See Define a third-party risk domain.
- Issues by priority
- Count and priority of the highest priority open issues. Select an issue name to view the Risk overview tab of the issue page. See Manage issues.
- Fourth-nth party overview
- Counts of fourth parties and their sub-parties that are associated with third parties or engagements and unknown fourth parties. Select a segment of the corresponding graph to view a list of known or unknown
fourth-parties.Note:Known fourth parties are organizations that have already been utilized as third parties in your risk management program and unknown fourth parties are only categorized as fourth parties and haven’t been utilized or identified as third parties.