---
sourceDocument: Yokohama Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/governance-risk-compliance

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Set up a risk intelligence provider service

# Set up a risk intelligence provider service {#ariaid-title1}

* Release version: Yokohama
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read

After you register a risk intelligence provider, you specify which of the provider's scoring or rating services you'll use. You also specify how their scores or ratings map to your TPRM ratings.

## Before you begin

Role required: sn_vdr_risk_asmt.vendor_assessment_reviewer

## Procedure

1. Navigate to AllThird-party Risk ManagementRisk Intelligence Provider SetupProvider Services.  
   Current risk intelligence provider services appear in the Third-party Provider Services related list.  
   Note:  
   The list of provider services also appears as a related list while you're registering a provider. The system auto-generates a unique name for the service by concatenating the Provider name and Score type.
2. Select New and then fill in the fields on the form.  
   {#tprm-riskintelprvdr-set-up__table_dwc_zzm_pdb__entry__2}

   | Field | Description |
   |-|-|
   | Provider | Name of the risk intelligence provider for this scoring service. |
   | Score type | Each service offered by the provider returns a particular type of risk rating or score, for example, Financial risk or Security risk. For each provider, you define at least two services. * Define a service that returns the overall risk score for the third party. * Define a service for each additional type of score that the provider can return. {#tprm-riskintelprvdr-set-up__ul_lpm_wvp_tzb} Important: * The Is multi-factor setting for a provider indicates that the provider can return multiple different score types. For providers that you configure as multi-factor, you must define a service with Score type = Overall Score before you can create other services for the provider. When the provider returns an overall score, you add the data. The normalized value appears as the "Overall" value on the provider's card on the Risk intelligence scores tab. * For providers that you configure as not multi-factor, you specify only one score type. The score or rating returned by the provider is converted to the normalized TPRM score. The normalized value is also displayed as the "Overall" value on the provider's card on the Risk intelligence scores tab. {#tprm-riskintelprvdr-set-up__ul_smg_d5q_tzb} |
   | Name | Name of the provider service being set up. The system auto-generates a unique name for the service by concatenating the Provider name and Score type. |
   | Risk area | Select the third-party risk domain associated with the score type. For more information, see [Define a third-party risk domain](https://www.servicenow.com/docs/No1M0dgnaEX5Y~W9v0IJew "A risk domain defines the type of risk to assess for a third party. For example, you might want to assess a data-management third party in terms of security risk and a bank in terms of financial risk. Security risk and financial risk are risk domains. Some platform applications refer to risk domains as \"risk areas.\""). Note: Risk domains are called "risk areas" in some platform applications. |
   | Copy mapping from | If applicable, specify an existing service with this provider that uses identical mapping as the service that you're configuring. * The mappings are copied to the current record. * The mappings become read-only. {#tprm-riskintelprvdr-set-up__ul_jj2_h5f_bzb} |
   [Table 1. Risk Intelligence Provider Service form]

   {#tprm-riskintelprvdr-set-up__table_dwc_zzm_pdb}
3. Scroll to the Mapping area and perform one of the following actions.
   * To map the provider ratings to the ratings used by TPRM, select the Is rating check box and then enter each provider rating next to its corresponding platform rating.
   * To associate a range of provider scores with each TPRM rating, don't select Is rating. Each row identifies the lowest and highest values in a rating. Enter the lowest value in the from column and the highest value in the to column.

   {#tprm-riskintelprvdr-set-up__choices_fv4_qmw_qxb}  
   You must fill in at least three rows.
   * All rows must be either ratings or ranges. A mix of the two types isn't allowed.
   * If there are more returned values than rows, group values in the appropriate row and separate with commas.

   {#tprm-riskintelprvdr-set-up__ul_ycb_cwf_bzb}  
4. Select Submit.  
   You can now specify the types of requests that you might later request from the provider.

   A request type is the name of the report available for the provider. For more information, [Set up a request type for a provider](https://www.servicenow.com/docs/~x5ZgZT9aaNqX2TnVmG~3Q "After you register a risk intelligence provider and service, you specify the available request types that you and your organization will use.").

*[\>]: and then