Tables installed with Third-party Risk Management

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 2 min. de leitura

    • Several types of tables are installed with the Third-party Risk Management application.

    Tables installed with Third-party Risk Management

    Tabela 1. Tables installed with Third-party Risk Management
    Table Name (System Name) Description
    Company [core_company] Stores all third-party entities (vendors, suppliers, partners).
    Engagement [sn_vdr_risk_asmt_vendor_engagement] Represents a specific engagement/relationship with a third party.
    Internal assessment [sn_vdr_risk_asmt_internal_assessment] Stores internal risk assessments such as tiering and inherent risk questionnaires (IRQs).

    Extends: Tiering assessment [sn_vdr_risk_asmt_vdr_tiering_assessment].
    Tiering assessment [sn_vdr_risk_asmt_vdr_tiering_assessment] Stores risk tiering assessments for third parties or engagements.
    External assessment [sn_vdr_risk_asmt_assessment] Stores external risk assessments sent to third parties or engagements.

    Extends: Planned task [planned_task].
    Assessment template [sn_vdr_risk_asmt_template] Defines templates for assessments (internal/external).

    Extends: Application File [sys_metadata].
    Third-party risk issue [sn_vdr_risk_asmt_issue] Tracks issues identified during assessments or engagements.

    Extends: Issue [sn_grc_issue].
    Third-party risk task [sn_vdr_risk_asmt_task] Tracks remediation or follow-up tasks related to issues or assessments.

    Extends: Planned task [planned_task].
    Vendor contact [vm_vdr_contact] Stores contact information for third-party representatives.

    Extends: User [sys_user].
    Risk intelligence score [sn_vdr_risk_asmt_security_score] Stores risk intelligence scores from external providers.
    Event-driven management rule [sn_tprm_dd_generation_rule] Defines rules for auto-generating assessments or questionnaires.
    Event-driven management history [sn_tprm_dd_rule_execution_history] Tracks execution history of event-driven management rules.
    Engagement risk scoring rule [sn_vdr_risk_asmt_engagement_risk_scoring_rule] Defines rules for scoring engagement risk.

    Extends: Risk scoring rule [sn_vdr_risk_asmt_risk_scoring_rule].
    Engagement level risk rating [sn_vdr_risk_asmt_engagement_level_rating] Stores calculated risk ratings at the engagement level.
    Third-party risk scoring rule [sn_vdr_risk_asmt_vendor_risk_scoring_rule] Defines rules for scoring third-party risk.
    Component criteria [sn_vdr_risk_asmt_component_criteria] Defines criteria for scoring components (for example, subsidiaries, engagements).
    Component [sn_vdr_risk_asmt_component] Represents assessable entities (subsidiaries, engagements, and so on).
    Risk area criteria [sn_vdr_risk_asmt_risk_area_criteria] Defines criteria for risk areas/domains.

    Extends: Type criteria [n_vdr_risk_asmt_type_criteria].
    Third-party risk area definition [sn_vdr_risk_asmt_risk_area_definition] Defines types of risk to assess (for example, security, financial).

    Extends: Type definition [sn_vdr_risk_asmt_type_definition].
    Usage analytics activity [sn_vdr_risk_asmt_ua_activity] Tracks managed activities for licensing and analytics.
    Assessment type [sn_vdr_risk_asmt_type] Defines assessment types. Extends: Application File [sys_metadata].
    Component definition [sn_vdr_risk_asmt_component_definition] Defines component types. Extends: Type definition [sn_vdr_risk_asmt_type_definition].

    Tables installed with Third-party Risk Due diligence tables

    Tabela 2. Tables installed with the Third-party Risk Due diligence
    Table Name (System Name) Description
    Approval [sn_tprm_approval] Tracks approval actions and states for each due diligence request.
    Third-party element classification [sn_tprm_dd_element_classification] Stores classification data for third-party elements. Used for categorization and compliance.
    Engagement component [sn_tprm_dd_engagement_component] Stores component records related to third-party engagements.
    Engagement component criteria [sn_tprm_dd_engagement_component_criteria] Defines criteria for evaluating engagement components.
    Third-party element [sn_tprm_dd_element] Stores records of third-party elements involved in due diligence.
    Engagement component definition [sn_tprm_dd_engagement_component_definition] Defines types and structure of engagement components. Extends: Type definition [sn_vdr_risk_asmt_type_definition].
    Engagement component level risk rating [sn_tprm_dd_engagement_component_level_rating] Stores calculated risk ratings at the engagement component level.
    Event-driven management rule [sn_tprm_dd_generation_rule] Defines rules for auto-generating assessments or questionnaires.
    Engagement entities [sn_tprm_dd_m2m_engagement_entity] Maps engagement records to associated entities.
    Question to questionnaire [sn_tprm_dd_m2m_question_to_questionnaire] Maps individual questions to questionnaire templates.
    Risk intelligence report request [sn_tprm_dd_risk_intel_request] Captures requests for external risk intelligence reports.
    Risk intelligence request type [sn_tprm_dd_risk_intel_request_type] Defines types of risk intelligence requests.
    Event-driven management history [sn_tprm_dd_rule_execution_history] Tracks execution history of event-driven management rules.
    Due diligence request [sn_tprm_dd_request] Stores all due diligence requests (onboarding, reassessment, offboarding) and tracks workflow state.
    Assessment template to document request template [sn_tprm_dd_m2m_asmt_template_doc_req_template] Maps assessment templates to document request templates.

    For information on tables installed with the Digital resilience third-party registers application, see Tables installed with Digital resilience third-party registers.