---
sourceDocument: Brazil Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Vendor Risk Overview reports --- Legacy view

# Vendor Risk Overview reports --- Legacy view {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Vendor Risk Overview reports --- Legacy view

The Vendor Risk Overview page in ServiceNow's Third-party Risk Management (TPRM) application is a legacy interface that has been replaced by third-party risk reports within the Vendor Management Workspace.
It provides a consolidated view of your third-party risk management program through various reports focused on vendors and engagements.
Show full answer Show less  
To access the legacy Vendor Risk Overview, navigate to **All \> Third-party Risk Management \> Overview**. While still available for customers using TPRM versions prior to 18.1.3, this dashboard is deprecated starting with version 18.1.3.

## Key Features

* **IRQ Process Replacement for Tiering:** The Internal Questionnaire (IRQ) process supersedes the traditional tiering assessment. IRQs offer enhanced flexibility and scalability by dynamically triggering external questionnaires based on respondents' answers and risk tiers. Existing tiering assessments can be duplicated as IRQ internal assessments to ease transition.
* **Vendor Tab Reports:** Includes reports summarizing total vendors, open and past tiering and risk assessments, vendor classification by risk tier, risk ratings, open issues by priority, upcoming risk assessments, and policy exceptions related to vendors.
* **Engagement Tab Reports:** Provides insights on total engagements, open and past tiering and risk assessments, engagement classification by tier and type, risk ratings, and open issues by priority.

## What Customers Can Expect

By using the legacy Vendor Risk Overview reports, customers can monitor and analyze the status and outcomes of their third-party risk assessments, including tiering and risk rating distributions. The reports help identify open issues by priority and track policy exceptions relevant to vendors and engagements.

However, customers are encouraged to adopt the newer Vendor Management Workspace reports and leverage the IRQ process for improved risk assessment flexibility and control. The legacy dashboard remains accessible only if the TPRM application was installed before version 18.1.3.  
The Vendor Risk Overview page is replaced by the third-party risk reports on the Vendor Management Workspace.

## Viewing the reports {#vendor-risk-overview-reports__section_m1k_rgh_l2b}

To open the Vendor Risk Overview, navigate to AllThird-party Risk ManagementOverview. The page displays reports that provide insights into your third-party risk management program. The

## The more complete IRQ process replaces tiering {#vendor-risk-overview-reports__id_g4d_2lm_gyb}


In the TPRM application, the IRQ is an internal questionnaire that improves the original tiering assessment process. IRQs enhance internal risk assessments with increased flexibility, control, and scalability. Unlike a tiering assessment where external questionnaires are determined solely by the risk tier, an IRQ can dynamically trigger external questionnaires based on both respondents' answers and risk tier.{#vendor-risk-overview-reports__ph-irq-replaces-tiering}


To enable a seamless transition to TPRM, you have the option to duplicate existing tiering assessments and designate them as IRQ internal assessments. Risk tiering is supported as an unchanging legacy process.{#vendor-risk-overview-reports__ph-tiering-is-legacy}

## Vendor Risk Overview --- Vendor tab {#vendor-risk-overview-reports__section_yx3_vbf_tlb}

<br />

<br />

{#vendor-risk-overview-reports__table_vendor_tab__entry__2}

| Report | Description |
|-|-|
| Total Vendors | Total number of third parties. |
| Open Tiering Assessments | Number of third parties with active tiering assessments open. |
| Open Risk Assessments | Number of third parties with active risk assessments open. |
| Past Tiering Assessments | Number of third parties that have not completed the tiering assessment within the assessment time frame. |
| Tier-Recommended Risk Assessments | Number of third parties performing risk assessments based on tiering. |
| Vendor Classification by Tier | Donut report showing the number of third parties assigned to each risk tier. |
| Vendors Performing Risk Assessment Based on Tiering | Number of third parties with active tiering-based risk assessments sorted by third-party risk. |
| Open Issues by Priority | All third-party risk open issues sorted by priority. |
| Vendors by Risk Rating | Number of third parties sorted by risk rating. |
| Upcoming Vendor Risk Assessments | Number of third-party risk assessments scheduled. |
| Vendor-related Policy Exceptions | All policy exceptions generated from third-party risk issues. |
[Table 1. Reports on the Vendor tab]

{#vendor-risk-overview-reports__table_vendor_tab}

## Vendor Risk Overview --- Engagement tab {#vendor-risk-overview-reports__section_lvb_qff_tlb}

<br />

<br />

{#vendor-risk-overview-reports__table_engagement_tab__entry__2}

| Report | Description |
|-|-|
| Total Engagements | Total number of engagements. |
| Open Tiering Assessments | Number of engagements with active tiering assessments open. |
| Open Risk Assessments | Number of engagements with active risk assessments open. |
| Past Tiering Assessments | Number of engagements that have not completed the tiering assessment within the assessment time frame. |
| Past Risk Assessments | Number of engagements with active tiering-based risk assessments. |
| Engagements Classification by Tier | Donut report showing the number of engagements assigned to each tier. |
| Engagements by Type | Number of engagements of each type. |
| Open Issues by Priority | All engagement open issues sorted by priority. |
| Engagements by Risk Rating | Number of engagements sorted by risk rating. |
[Table 2. Reports on the Engagement tab]

{#vendor-risk-overview-reports__table_engagement_tab}  
Important:  
Starting with version 18.1.3 of Third-party Risk Management the Vendor Risk Overview dashboard is deprecated. If Third-party Risk Management was installed prior to 18.1.3 the Vendor Risk overview dashboard is still available for your use.

*[\>]: and then


