Risk intelligence report requests management
You can view a list of risk intelligence report (RIR) requests, their associated providers, scores, and report URLs. In addition, you can create requests and make updates by using the Third-party Risk Management application.
Risk intelligence report request process
If you have the third-party risk (TPR) assessor [sn_vdr_risk_asmt.vendor_risk_assessor] or TPR manager [sn_vdr_risk_asmt.vendor_risk_manager] role, you can request a RIR or score. You can create a RIR request that is associated with a third party or due diligence request. If you want to associate an RIR request with a due diligence request, it must be after an inherent risk questionnaire (IRQ) has been completed (that is when the due diligence request has entered the IRQ in progress state). You can update the Sanction section at any time.
For more information, see Request a risk intelligence report, Request a risk intelligence report associated with a due diligence request, Risk intelligence report request form, and Track sanctions-related information.
The following example shows how a new risk intelligence report request appears in Vendor Management Workspace.
Risk intelligence report request view from the Details tab on the report request page.
The following table shows the information that is captured in an RIR request.
| Field | Description |
|---|---|
| Risk intelligence report request section | |
| Number | Unique ID number that is auto-assigned by the system and starts with the text RIR. |
| Provider | Organization that is responsible for generating the risk intelligence information for the request. |
| Request type | Type of report or score that is provided. Each service that is offered by the provider returns a particular type of risk rating or score. For example, Financial risk or Security risk. Note: The request types that are available are dependent on what has been set up for the provider. For more information, see Set up a request type for a provider. |
| Third party | Third party that is to be scored by the provider. |
| Due diligence request | Due diligence request that is associated with the risk intelligence request. There’s an option to request risk intelligence as part of a due diligence request. For more information, see Request a risk intelligence report associated with a due diligence request. |
| Short description/Description | Text that explains and clarifies the intent of the request for stakeholders. |
| State | Current state of the request: - Open - Order pending - Order in progress - Closed complete - Closed incomplete |
| Request date | Date that the order is pending and ready to be sent to the provider. |
| Received date | Date that the response from the provider is received. |
| Report results section | |
| Score | Overall risk score that is determined by the provider. |
| URL | Link to additional information about the origin of the generated score. |
| Score generated on | Date that the score is generated. |
| Sanction section | |
| Sanctioned | Option that you can select Yes to indicate that the third party is sanctioned. This field is set to No by default. |
| Start date | Start date of the sanctioned enforcement. |
| End date | End date of the sanctioned enforcement. |
| Details | Text that explains and clarifies the type of sanction and how it impacts your business relationship with the third party. |
Risk intelligence report requests tab
While viewing the data for a third party, you can select the Risk intelligence report requests tab to view the list of report requests.
The following example shows the Risk intelligence report requests tab in Vendor Management Workspace.
Risk intelligence report requests view from Risk intelligence Report requests tab in Vendor Management Workspace.
For more information on RIR requests, see Using risk intelligence reports and scores.
Risk intelligence report request states
The RIR requests have the following potential states:
Open
An RIR request enters this state after the record has been created and saved by the Third-party Risk (TPR) manager, TPR assessor, or contract negotiator that is assigned to the due diligence request. For each risk intelligence request, the system auto-assigns a unique ID number that starts with the text RIR.
Order pending
An RIR request enters this state after the record has been reviewed and submitted by the Third-party Risk (TPR) manager, TPR assessor, or contract negotiator that is assigned to the due diligence request.
The following changes take place:
- The order has been submitted to the provider.
- The Request date field has been populated with the date that this record was submitted on.
- All fields in the Risk intelligence report request section are read-only.
- Order in progress
An RIR request enters this state after the order has been received by the provider.
The following changes take place:
- The score records are generated with the report request.
- The Score generated on field is updated.
- Closed incomplete
An RIR request enters this state after the order was received by the provider but couldn’t be processed due to an error, and the order was closed.
Closed complete
An RIR request enters this state after the order was received and processed by the provider.
Canceled
An RIR request enters this state after a TPR manager, TPR assessor, or contract negotiator cancels the report request. If you must cancel a request, it can be done while the request is in the Open or Order pending state. If you want to create a duplicate of a canceled request, you can’t edit that record. You must create a new RIR request.
Risk intelligence report request form
Use the risk intelligence request form to capture all the information that you need to request risk intelligence using Third-party Risk Management. As a third-party risk manager, third-party risk assessor, and contract negotiator that is assigned to the due diligence request, you can request risk intelligence.
Parent Topic:Third-party Risk Management reference
Related topics
Integrating scores from risk intelligence providers
Risk intelligence report request form