---
sourceDocument: Australia Better Together
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/better-together

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Better Together

ft:clusterId :

    - btss

bundleId :

    - btss

workflow :

    - Technology


---

# Monitoring and assessing enterprise risks during third-party assessments

# Monitoring and assessing enterprise risks during third-party assessments {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 min. de leitura

Integrating Risk Management with Third-party Risk Management consolidates risk scores, and delivers real-time insights through dashboards and external risk intelligence.

## Combined benefits of integrating Risk Management with Third-party Risk Management {#adding-rm-to-tpr-program__section_klq_4jd_jgc}

Use Risk Management and Third-party Risk Management together to:

* Continuously monitor supplier risk with integrated risk intelligence feeds (BitSight, SecurityScorecard, RiskRecon, Interos, EcoVadis) to pre‑screen, validate responses, and trigger reassessments when scores change.
* Aggregate third‑party and engagement risk into executive dashboards and reports for faster, informed decisions.
* Visualize concentration risk across regions to identify hotspots and manage exposure.
* Standardize due diligence from onboarding through periodic reassessments, renewals, and offboarding with guided workflows and playbooks.
* Automate issue generation, tracking, and remediation with clear ownership across internal and external stakeholders.
* Enable secure collaboration via the Third‑party Portal and streamlined internal orchestration in Vendor Management Workspace.
* Connect third‑party risks to enterprise risks, policies, controls, privacy, and BCM for a holistic, auditable risk posture.

{#adding-rm-to-tpr-program__table_jcw_cxv_hyb__entry__4}

| Feature | Risk Management | Third-party Risk Management | All applications together |
|-|-|-|-|
| Third-party risk due diligence, external and internal risk assessment | Limited | ![Yes]() | ![Yes]() |
| Risk intelligence integration | ![No]() | ![Yes]() | ![Yes]() |
| Risk scoring and monitoring | Limited | ![Yes]() | ![Yes]() |
| Executive dashboards and reports | Limited | ![Yes]() | ![Yes]() |
| Concentration risk map | ![No]() | ![Yes]() | ![Yes]() |
| Issues and remediation workflow | ![Yes]() | ![Yes]() | ![Yes]() |
| Lifecycle automation (onboarding → offboarding) | Limited | ![Yes]() | ![Yes]() |
[ ]

{#adding-rm-to-tpr-program__table_jcw_cxv_hyb}

## Workflow for Risk Management integration with Third-party Risk Management {#adding-rm-to-tpr-program__section_mlq_4jd_jgc}

Using these applications together provides the following benefits:

* Evaluate compliance risk when onboarding third parties and engagements
* Leverage more complete risk scores comprised of compliance and risk assessment data

1. Risk Manager defines and manages enterprise risk statements, categories, and scoring models.
2. TPR Assessor initiates external risk assessments for third parties and engagements.
3. The third party completes the assessments.
4. Responses update risk posture and scoring dynamically.
5. TPR Assessor evaluates risk based on updated risk scores and other assessment data.
6. Risk Manager and TPR Assessor collaborate to mitigate identified risks.

## Requirements for integration {#adding-rm-to-tpr-program__section_qlq_4jd_jgc}

Install the following plugins:

1. Third-party Risk Management (com.sn_vdr_risk_asmt) from ServiceNow® Store. See [Configuring Third-party Risk Management](https://www.servicenow.com/docs/access?context=tprm-configuring&version=australia&pubname=australia-governance-risk-compliance&ft:locale=en-US).
2. Due diligence request workflow (com.sn_tprm_dd).
3. GRC: Policy and Compliance Management (com.sn_compliance) from ServiceNow® Store. See [Implement setup checklist for the GRC: Policy and Compliance Management application](https://www.servicenow.com/docs/access?context=policy-compliance-impl-checklist&version=australia&pubname=australia-governance-risk-compliance&ft:locale=en-US).

## Get started with integration {#adding-rm-to-tpr-program__section_slq_4jd_jgc}

To integrate Risk Management with Third-party Risk Management, complete these steps:

1. Install and activate required applications:
   * Third-party Risk Management (com.sn_vdr_risk_asmt)
   * Due Diligence Request Workflow (com.sn_tprm_dd)
   * Risk Management (com.sn_risk)
2. Configure Vendor Management Workspace and Third-party Portal for collaboration.
3. Enable risk intelligence integrations (BitSight, SecurityScorecard, RiskRecon, Interos, EcoVadis).
4. Define tiering and inherent risk questionnaires (IRQ) for third parties and engagements.
5. Create and submit due diligence requests to initiate assessments.
6. Send and manage assessments using smart assessment engine or classic engine.
7. Link questionnaire metrics to risk statements and scoring models for dynamic risk posture updates.
8. Monitor dashboards for risk scores, concentration risk, and issues; collaborate to remediate findings.