How does Risk Rating and Computed Risk Rating on Vendor is populated from the Vendor risk assessment

[bejawada]

Hi All,

I have created a new Vendor and engagement, I have followed the entire process of creating the Assessment and submitted to Vendor Contact. I have impersonated with the Vendor Contact and filled the Questioners and submitted the assessment.

Post Submitting the assessment Risk Rating and Computed Risk Rating fields on the Vendor Risk Assessment form is populated based on the calculations for the answers submitted.

But the Risk Rating and Computed Risk Rating fields on the Vendor(Company) record is not getting populated.

I would like to understand how these two fields are populated on the Vendor(Company) record.

Please help me in finding the solution for this.

Thanks in advance,

Sarath Kumar

[Community Alums]

Hi @bejawada ,

The Risk Rating on the vendor table isn't dependent on any type of assessment result. Not from the tiering assessment, repeating assessment, or regular assessment. 

The reason behind that is because there might be multiple assessments being performed as part of the vendor risk management process - perhaps one to measure reputation risk, one to measure financial viability, and another to determine their operational capacity - which means that the logic to define the risk rating from an assessment is too complex as to simply just inherit it from the last completed assessment. 

In other words, it is set manually.

Also refer to this KB :https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0967157

[bejawada]

Thanks for your response @Community Alums ,

I understood your point, when I recheck the Vendor Risk assessment after submitted by the Vendor Contact, the Risk Rating and the Computed Risk Rating fields is empty on the Vendor Risk assessment form itself.

What could be the reason behind not updating the two fields in the Vendor Risk assessment form.

Thanks,

Sarath Kumar

[Community Alums]

Hi @bejawada ,

As i mentioned in my reply, Risk Rating on the vendor table isn't dependent on any type of assessment result. you will need to manually fill it.

[bejawada]

As per my previous comment, the risk rating is not populating on the Risk Assessment, please find the below screen shot for your reference.

Please look into the Highlighted Boxes.