Hi Tommaso, 

The idea here is in our playbook we do show only two records getting created for these risk assessments however if you have SLO + TPRM installed then the flow will take you to TPRM to complete the risk assessment where you will find all the required assessment records or templates created and managed that will be used for the risk assessment of a supplier. The same SLO can be integrated with any third party tool that the organisations are using and bring in the risk details in our onboarding flow. Based on what risk tool you are using the assessments will be conducted either in servicenow or outside.