---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/pt-BR/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Add a risk

# Manually add a risk to a third party or engagement {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

If you're using both Risk Management and Third-party Risk Management, you can associate risks and risk statements with third parties and engagements. These associations influence risk posture and scoring.

## Antes de Iniciar

Role required: admin or sn_vdr_risk_asmt.vendor_risk_admin

## Por Que e Quando Desempenhar Esta Tarefa

When you associate a risk with a third party or engagement, the risk becomes part of the entity's risk profile and can be included in scoring calculations. This does not automatically trigger assessments unless configured through TPRM rules.

Controls are automatically generated when you associate a policy with an entity type or an entity type with a control objective. A control is created for each entity listed in the entity type for the control objective. Controls can also be manually created.

For more information on creating risk statements and risks in Risk Management, see [Create a risk statement](https://www.servicenow.com/docs/OAww8ziJLHz_KFzWhnEFMg "Risk managers create risk statements to group risks into manageable categories."), [Create a risk manually](https://www.servicenow.com/docs/zArrI4UrLaNSeAIZSGcW~A "Risk administrators can create risk records when they see a potential for a gain or loss of value."), and [Generate a risk from a risk statement](https://www.servicenow.com/docs/55zyk1h14n3UA4QU08g8nQ "Making associations with risk statements automatically creates risks.").

To understand the difference between a control objective and a control, see [Relationship between risks, risk events, and risk statements](https://www.servicenow.com/docs/HtITWo8gAY6aHYBWEeh7JA#relate-risk-events-to-risk "Relating risk events to risks and relating a risk statement to a risk is important for all organizations that use the Risk Management application. Properties to enable these relationships are provided under Risk Event Properties and Risk Management properties.").

## Procedimento

1. Navigate to WorkspacesVendor Management Workspace.
2. Select the list icon (![List icon.]()) and then navigate to Third partiesAll third parties or EngagementsAll engagements.
3. Select the third party or engagement that you want.
4. Navigate to the Risks tab of the third party or engagement.
5. Assign a risk to the engagement by selecting New.
6. On the form, fill in the fields.  
   For descriptions of all these fields, see [Create new risk form](https://www.servicenow.com/docs/GtZhb~O0dXPuEwN9oDrBHg "Use the create new risk form to capture all the information that you need to associate a control with a third party or engagement using the Third-party Risk Management application. As a third-party risk admin, you can create a control.").
7. Select Submit.  
   For more information on managing risks, see [Manage risks, risk statements, and risk frameworks](https://www.servicenow.com/docs/gTapEJm7Bmqsw54CJWxzNQ "The risk library contains all risk frameworks and risk statements. Risk frameworks are used to group risk statements into manageable categories, while risk statements group the individual risks. The risk register is the central repository for all potential risks that could occur at any time, anywhere in the organization.").  
   The risk is created and all related lists are visible.
* **[Create new risk form](https://www.servicenow.com/docs/GtZhb~O0dXPuEwN9oDrBHg)**   
  Use the create new risk form to capture all the information that you need to associate a control with a third party or engagement using the Third-party Risk Management application. As a third-party risk admin, you can create a control.

**Conceitos relacionados**   

* [Integrating Third-party Risk Management with Risk Management](https://www.servicenow.com/docs/73GFx4LLFeOJ7Yi1~D1Qlw "Integrating Risk Management with Third-party Risk Management lets you model enterprise risks and use third‑party assessments to dynamically update risk posture and scores for third parties and engagements. Optional TPRM rules can trigger assessments or remediation work when risks change.")  
**Tarefas relacionadas**   

* [Define the risk appetite for a risk](https://www.servicenow.com/docs/1FY6Bl6CGCk_ICnc4TYqoA "Define the risk appetite on the risk records in the Risk Management application to evaluate all possible risks and to set the boundaries for acceptable and unacceptable risks.")
* [Create a risk statement](https://www.servicenow.com/docs/OAww8ziJLHz_KFzWhnEFMg "Risk managers create risk statements to group risks into manageable categories.")
* [Define the risk appetite for a risk statement](https://www.servicenow.com/docs/npwgKlf5WR46WfdtU4gy9w "Define the risk appetite on the risk statement records in the Risk Management application to evaluate all the possible risks and set the boundaries for the acceptable and unacceptable risks.")  
**Referência relacionada**   

* [Create new risk form](https://www.servicenow.com/docs/GtZhb~O0dXPuEwN9oDrBHg "Use the create new risk form to capture all the information that you need to associate a control with a third party or engagement using the Third-party Risk Management application. As a third-party risk admin, you can create a control.")