--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Due diligence request process management # Due diligence request process management {#ariaid-title1} * Release version: Australia * * Updated March 12, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read From the Details tab, you can view and adjust the due diligence request information for a third party. You can also log external-facing comments and private work notes, attach files, and track request updates in the activity stream. The Details tab for a due diligence request displays information in the following sections: ## Third-party due diligence request {#tprm-ws-dd-mgt-pg-details-tab__section_k2k_3vt_2yb} {#tprm-ws-dd-mgt-pg-details-tab__table_drw_dbj_fyb__entry__2} | Field | Description | |-|-| | Number | For each due diligence request, the system auto-assigns a unique ID number that starts with the text DDR. | | State | Current state in the due diligence process: IRQ, external due diligence, approval, contract risk, or closed. | | Request Type | * Onboard a new engagement. Start the onboarding process for a new engagement with an existing third party. * Reassess an existing engagement. Reassess an existing engagement when the conditions change. For example, let's say that you hear adverse news or have changes in your third-party's supply lines. You might want to reassess the risk by conducting additional due diligence. * Reassess an existing engagement for contract renewal. Reassess the risk before your organization renews the contract with a current third party or engagement by conducting due diligence. * Offboard an engagement with due diligence. Determine if offboarding (terminating the relationship) with an engagement is the optimal course of action by conducting due diligence. For example, it might be too risky to switch third parties or engagements even if their current performance doesn't meet expectations. * Offboard an engagement with NO due diligence. Request that an engagement be permanently terminated when an engagement ends or you want to switch to a different third party for other reasons. In this case, you typically don't need to conduct additional due diligence. The process does, however, include the normal Inherent Risk Questionnaire (IRQ) process to confirm that the services provided by the engagement will no longer continue. {#tprm-ws-dd-mgt-pg-details-tab__ul_pyy_xhh_2zb} | | Priority | Priority of the request. * 1 - Critical * 2- High * 3 - Moderate * 4 - Low * 5 - Planning {#tprm-ws-dd-mgt-pg-details-tab__ul_msv_vzx_nvb} | | Third party | Third party with which the request is associated. | | Annual spend | Money that is spent with the third-party organization in one year. | | Engagement | Engagement with which the request is associated. Note: After the due diligence request is submitted by the requester, the TPR manager or due diligence request owner can update this field to an existing engagement by selecting the magnifying glass icon . This helps avoid onboarding existing engagements. | | Skip contract risk process | Option to skip the contract risk process. When you select the check box, you bypass the `contract negotiation` state. The Contract start date and Contract expiration date fields are replaced with Engagement start date and Engagement expiration date. See [Contract Risk process](https://servicenow-prod.fluidtopics.net/qzVUTDoX2tjNy4ZNBARynw#tprm-workflow-in-workspace__def_contract_risk_process). Note: After the Third-party risk (TPR) manager approves the request, it won't be sent to the contract negotiators, and the request is closed. | | Requestor | Creator of the request. | | Opened | Date the request was opened. | | Contract start date, Expiration date | Preferred dates for the beginning and end of interactions with the engagement. | | Engagement start date, Engagement expiration date | Preferred dates for the beginning and end of interactions with the engagement. | | IRQ assessor | User at your organization that responds to the IRQ. See [IRQ process management](https://servicenow-prod.fluidtopics.net/VFqt9FGjYrGE8blACn2cAg "The first internal step after an engagement request is approved is to start the IRQ process to scope the risk by determining the third party's risk score."). | | Contract negotiator | User at your organization that prepares, negotiates, and approves the contract. | | Assignment group | Qualified group of individuals available to work on the request. For new requests, the Assignment group is set to Due diligence request assigners. The system sends an email notification to all users in the group that is specified in the Assignment group. The message states that the request was received and is in the New state. The message also includes a link to the details page for the request. On the due diligence request form: * Any member of the group can select Assign to me or set the Owner field to any other member of the group. * A TPR manager or TPR assessor can clear the Assignment group field or change the value to select from different TPR assessors in the Owner selection list. {#tprm-ws-dd-mgt-pg-details-tab__ul_rpj_v35_bzb} | | Assigned to | The individual assigned to the due diligence request. The owner is responsible for confirming that the assessment is completed in a timely fashion by the third party, reviewing their responses, and creating and resolving issues. To drive the assessment to its completion, owners are notified when an assessment reaches a particular milestone. The owner must have the TPR manager or TPR assessor role. | | Short description, Description | Description of the request that helps others to understand the creator's intent and requirements. | [Table 1. Third-party due diligence request] {#tprm-ws-dd-mgt-pg-details-tab__table_drw_dbj_fyb} ## Third-party basic information {#tprm-ws-dd-mgt-pg-details-tab__id_wfb_lq1_2zb} {#tprm-ws-dd-mgt-pg-details-tab__table_tpddr__entry__2} | Field | Description | |-|-| | Third-party name | Name of third party with which the request is associated. | | DUNS number | Unique numeric identifier for the single business entity. A DUNS number isn't legally required for a business. Note: In the Third-party due diligence request \[sn_tprm_dd_request\] table, there are two DUNs number columns: vdr_duns_number indicates the third party DUNs number and eng_duns_number indicates the engagement DUNs number. | | Street, City, State/Province, ZIP/Postal code, Country, Phone, Fax | Standard contact information for the third-party organization. | | Website | URL for the third party. | | Type | Type of third party. | | Industry | The industry in which the third party is involved. | | First name, Last name, Title, Email, Phone | Standard contact information for the third-party contact. | [Table 2. Third-party basic information] {#tprm-ws-dd-mgt-pg-details-tab__table_tpddr} ## Engagement basic information {#tprm-ws-dd-mgt-pg-details-tab__section_tmx_r2g_2zb} {#tprm-ws-dd-mgt-pg-details-tab__table_ebi__entry__2} | Field | Description | |-|-| | Engagement name | Name of engagement with which the request is associated. | | Type | Type of product or service for this engagement. | | Use the corporation address | Option to use the same corporation address as the third party. When you select the check box, auto-populate the related fields with the third-party organization contact information. | | Street, City, State/Province, ZIP/Postal code, Country, Phone, Fax | Standard contact information for the engagement organization. | | Use the same contact | Option to use the same contact information as the third party. When you select the check box, the related fields are auto-populated with the third-party contact information. | | First name, Last name, Title, Email, Phone | Standard contact information for the engagement contact who will respond to the questionnaires. | [Table 3. Engagement basic information] {#tprm-ws-dd-mgt-pg-details-tab__table_ebi} ## Risk ratings {#tprm-ws-dd-mgt-pg-details-tab__id_yvf_wq1_2zb} Fields are auto-populated by the current stage of the IRQ process for the request. {#tprm-ws-dd-mgt-pg-details-tab__table_rr__entry__2} | Field | Description | |-|-| | Inherent assessment rating | Rating determined by the IRQ process. | | Risk intelligence rating | Rating determined by data from a risk intelligence service provider. | | Third-party assessment rating | Rating determined by responses during the external assessment process. | | Engagement rating | Rating determined for the engagement. | [ ] {#tprm-ws-dd-mgt-pg-details-tab__table_rr} ## Progress summary {#tprm-ws-dd-mgt-pg-details-tab__id_sqq_541_2zb} Status of the due diligence processes. The fields are auto-populated by the current stage of each assessment for the due diligence request. * Inherent risk assessment * Third-party risk assessment * Engagement risk assessment {#tprm-ws-dd-mgt-pg-details-tab__ul_y32_jrj_fzb} ## Compose, Activity, Attachments {#tprm-ws-dd-mgt-pg-details-tab__section_sgy_xfg_2zb} The Compose section on the Details tab enables you to permanently add text to the record. The Activity section is updated with any actions on issues and tasks, submissions to TP contacts, and also with work notes and comments that users add to the record. Add text in the following fields as needed: * Work notes (Private): Information about the third-party risk assessment. Work notes are visible only to internal users who are assigned to the process. * Comments: Comments about the third-party risk assessment are visible both to internal users and to third-party contacts. {#tprm-ws-dd-mgt-pg-details-tab__ul_g1d_3kn_cqb} * **[Request third-party risk due diligence request form](https://servicenow-prod.fluidtopics.net/2We7njK4CaVdN5gwU~6VYw)** The due diligence request form captures all the initial information that you need to start the due diligence process. Any employee within your organization can request due diligence. If you're selecting an existing third party, a significant portion of the information is automatically filled in. **Related concepts** * [Requesting third-party risk due diligence](https://servicenow-prod.fluidtopics.net/Tox8oymaaXzAo4c7AdHemA "Request third-party risk due diligence to determine the level of risk for interactions with a third party, engagement, or fourth party by using Third-party Risk Management. You conduct due diligence to become aware of the associated risks so that you can make informed decisions, establish appropriate controls, and mitigate the potential negative impact when working with external parties.") * [Offboarding an engagement without conducting due diligence](https://servicenow-prod.fluidtopics.net/QmMLzhjrAPv3R3e5YBb5Pw "Request that an engagement be permanently terminated when an engagement ends or you want to switch to a different third party for other reasons. In this case, you typically don't need to conduct additional due diligence. The process does, however, include the normal Inherent Risk Questionnaire (IRQ) process to confirm that the services provided by the engagement will no longer continue.") **Related tasks** * [Request due diligence for a third-party engagement](https://servicenow-prod.fluidtopics.net/hXoICdC6yfzFH8EhkMI1OQ "Request due diligence to assess the risk that is associated with doing business with an engagement. By conducting due diligence, you gain access to the most up-to-date, comprehensive, and accurate information before making a decision on entering into a business relationship.") **Related reference** * [Request third-party risk due diligence request form](https://servicenow-prod.fluidtopics.net/2We7njK4CaVdN5gwU~6VYw "The due diligence request form captures all the initial information that you need to start the due diligence process. Any employee within your organization can request due diligence. If you’re selecting an existing third party, a significant portion of the information is automatically filled in.") * [Create New Third-party engagement form](https://servicenow-prod.fluidtopics.net/A5Xs_WfQyPD9dBFCUyUJEQ "Use the create new third-party engagement form to capture all the information that you need to create a third-party engagement record in Digital resilience third-party registers using Third-party Risk Management. As a third-party risk assessor you can create a third-party engagement record.")