--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Monitoring your fourth-nth parties # Monitoring your fourth-nth parties {#ariaid-title1} * Release version: Australia * * Updated March 12, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Monitoring your Fourth-Nth Parties The Third-party Risk Management application allows you to identify and manage risks associated with fourth-nth parties---entities that third parties depend on to deliver products or services. By monitoring these parties, you ensure they meet the same security and compliance standards as the primary third party, thereby protecting sensitive data and systems. Show full answer Show less ## Key Features * **Fourth-Nth Party Identification:** Recognize various entities (sub-suppliers, consultants) that can create downstream risks. * **Linking Fourth Parties:** Create connections between fourth parties without forming circular dependencies. * **Registration Processes:** Add fourth-nth party records manually or through a registration questionnaire sent to third parties. * **Vendor Management Workspace:** View and monitor all related fourth-nth parties, enabling informed decisions about engagements. * **Promotion of Records:** Upgrade a fourth-nth party to a third-party record to utilize existing due diligence information. ## Key Outcomes By effectively managing fourth-nth parties, you can enhance your risk management strategy, maintain compliance, and make informed decisions regarding third-party relationships. This proactive approach helps mitigate risks associated with dependencies on external entities, ensuring the integrity and security of your operations. You can identify and manage the third-party risks that depend on the services of the fourth-nth parties by using the Third-party Risk Management application. By monitoring your fourth-nth parties, you can help to ensure that they adhere to the same security and compliance standards as the primary third party. ## Fourth-nth parties {#tprm-monitor-fourth-parties__section_p2w_cxs_wsb} Fourth-nth parties can include various entities, such as sub-suppliers, service providers, consultants, or any other organization that the third party relies on to deliver its products or services. These parties could have access to your sensitive data, systems, or processes, which makes them potential sources of risk. Let's look at some fourth-nth party risk examples: Parts : A company regularly uses an item from a third party that relies on a hardware part from another organization. In this case, the organization that provides the additional part is a fourth party that can potentially create a downstream risk for the item that is provided by the third party. Services : A company stores its payroll application by using the Automatic Data Processing (ADP) service. The ADP service is a third-party service that relies on Amazon Web Services (AWS) to store its data. The ADP service depends on AWS to have security measures and processes in place to safeguard their data and maintain its safety. Although AWS is often a third party of primary services, the AWS service is a fourth party to the third party ADP in this case. You can link two fourth parties to each other. For example, a link can occur when an organization that provides an additional part relies on another fourth party to deliver the hardware part. However, you can't create a loop when you link two fourth parties. The starting point can be either a third or fourth party. For example, let's consider Fourth party A, which has a child Fourth party B. Fourth party B, in turn, has a child Fourth party C. However, Fourth party C can't have a child that leads back to Fourth party A. This restriction ensures that a circular dependency isn't formed among the fourth parties. ## Fourth-nth party actions {#tprm-monitor-fourth-parties__section_vjz_2bd_1bc} As part of your risk management program, you can add fourth-nth party information manually or by collecting responses from a third party by using a fourth-party registration questionnaire. You can manually create a fourth-nth party record if you don't have time to send a questionnaire to a third party or only need to create one record. After reviewing and registering, or manually creating these fourth-nth party records, they're available for monitoring by using Vendor Management Workspace. As your business relationships change, you can keep relevant information current by promoting a fourth-nth party record to a third-party record. This third-party record incorporates all existing information and then designates the existing fourth-nth party as a known fourth party. Here are the different actions that you can take to manage and monitor fourth-nth parties: Register the fourth-nth parties : If you're a third-party risk (TPR) assessor or manager, you can register fourth-nth parties after collecting responses from a third party by using the fourth-party registration questionnaire. You can send the fourth-party registration questionnaire only to the third parties and not engagements. For more information, see [Register a fourth-nth party](https://servicenow-prod.fluidtopics.net/m9vy7oh9yJ3uYxQKYRSouA "Register fourth-nth parties after collecting responses from a third party by using the fourth-party registration questionnaire in the Third-party Risk Management application. With the fourth-party registration questionnaire, you can create multiple fourth-nth party records at a time."). View the fourth-nth parties that are associated with a third party : You can view all the related fourth-nth parties by navigating to the Downstream suppliers tab of the third-party page in Vendor Management Workspace. Viewing all the fourth parties that are linked to a third party can help you make informed decisions about initiating or continuing a relationship with an engagement. For instance, if a fourth party that is associated with a third party is known for higher risks in the automotive industry, it might still be acceptable to pursue an engagement in a different industry. However, if an engagement with the same third party involves the automotive industry, the risk could be considered too high. For more information on how to view all the related fourth-nth parties, see [Viewing information on fourth parties](https://servicenow-prod.fluidtopics.net/rWbDtn2sAgQJwCb7mZ0IHw "The Downstream suppliers tab displays overview information on fourth parties that the third party engages with. On most reports, you can select an item to view the underlying data."). View the fourth-parties overview section : You can view the known fourth parties, the sub-parties that are associated with the third parties, and the unknown fourth parties by navigating to the Vendor Management Workspace home page. Having this high-level view is helpful in understanding how much information is available for a fourth party and how it relates with the other third parties and engagements. For example, if it's a known fourth party, you can leverage all the existing due diligence information that was gathered while it was assessed as a third party. Note: The known fourth parties are organizations that have already been used as third parties in your risk management program. The unknown fourth parties are only categorized as fourth parties that haven't been used or identified as third parties. For more information on viewing the known fourth parties, the sub-parties that are associated with the third parties, and the unknown fourth parties, see [TPRM Home page](https://servicenow-prod.fluidtopics.net/6BFuJZgLLcHz9XQ4e_pyUA "The home page displays reports of important risk information and provides quick access to actions for TPR managers and TPR assessors."). Manually create a fourth-nth party record : If you're a TPR assessor or manager, you can manually create a fourth-nth party record.For more information on how to create a fourth-nth party record, see [Create a fourth-nth party record](https://servicenow-prod.fluidtopics.net/G5uz0kobrc7eYe99GVUFMg "Create a fourth-nth party record by using the Third-party Risk Management application. You can create fourth-nth party records manually as an alternative to using a fourth-party registration questionnaire."). Note: You can add an existing third party as a fourth-nth party to another third party by navigating to the Downstream suppliers tab of a third-party page in the Vendor Management Workspace and selecting Add. After it's added the existing third party is now categorized as both a third party and fourth-nth party for the chosen third party and includes all collected information. Promote a fourth-nth party to a third party : If you're a TPR assessor or manager, you can promote a fourth-nth party record to a third party. After you promote a fourth-nth party to a third party, a third-party record is created and the existing fourth-nth party is identified as a known fourth party.For more information on how to promote a fourth-nth party record to a third-party record, see [Promote a fourth-nth party to a third party](https://servicenow-prod.fluidtopics.net/DOD_agI8W~QyKEN~XYx5kw "Promote a fourth-nth party record to a third party by using the Third-party Risk Management application. If you’re now working with a fourth-nth party at the third-party level, you can keep relevant information current by promoting a fourth-nth party record to a third-party record."). **Related concepts** * [TPRM Home page](https://servicenow-prod.fluidtopics.net/6BFuJZgLLcHz9XQ4e_pyUA "The home page displays reports of important risk information and provides quick access to actions for TPR managers and TPR assessors.") **Related reference** * [Viewing information on fourth parties](https://servicenow-prod.fluidtopics.net/rWbDtn2sAgQJwCb7mZ0IHw "The Downstream suppliers tab displays overview information on fourth parties that the third party engages with. On most reports, you can select an item to view the underlying data.")