---
sourceDocument: Zurich Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/governance-risk-compliance

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Create new risk form

# Create new risk form {#ariaid-title1}

* Release version: Zurich
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Use the create new risk form to capture all the information that you need to associate a control with a third party or engagement using the Third-party Risk Management application. As a third-party risk admin, you can create a control.
{#tprm-risk-record-form__table_zsd_kxs_hgc__entry__2}

| Field | Description |
|-|-|
| Number | Unique identification number. This field automatically populated. |
| Inherit from risk statement | Option to create a risk independent of risk statement. |
| Active | Option to indicate if the risk is active. |
| Name | Name for the risk. Field is auto-populated if the risk is generated from a risk statement, but can be changed without affecting the relationship between the risk and risk statement. |
| Description | Description of the risk and how it is a threat to the organization. |
| Risk Statement | Risk statement this risk is associated with. |
| Category | Category of risk which applies to the profile. * Legal * Financial * Operational * Reputational * Legal/Regulatory * Credit * Market * IT {#tprm-risk-record-form__ul_atd_kxs_hgc}If the risk is generated from a risk statement, the field is automatically populated/ |
| Entity | Entity related to the risk. Note: Only active entities are shown. |
| Sync with entity owner | Option to assign the entity owner as the owner of this risk record. When selected, if the entity owner changes, the risk owner is updated automatically. This option is set to True by default. |
| Owning group | Owning group for the risk. |
| Risk relevance | Explanation of how this risk applies to you. Note: This field only appears when the Inherit from risk statement option is selected. |
| Owner | Owner for the risk. Note: The owner is always added as a respondent. |
[Table 1. Risk form]

{#tprm-risk-record-form__table_zsd_kxs_hgc}
**Related concepts**   

* [Integrating Third-party Risk Management with Risk Management](https://www.servicenow.com/docs/yz9SI6zm3InSbkvckiCYfA "Integrating Risk Management with Third-party Risk Management lets you model enterprise risks and use third‑party assessments to dynamically update risk posture and scores for third parties and engagements. Optional TPRM rules can trigger assessments or remediation work when risks change.")  
**Related tasks**   

* [Create a risk statement](https://www.servicenow.com/docs/3ain9WJdTDD~BGqIhLXRzg "Risk managers create risk statements to group risks into manageable categories.")
* [Define the risk appetite for a risk statement](https://www.servicenow.com/docs/8W7luQeiP204zUNeOgaHHQ "Define the risk appetite on the risk statement records in the Risk Management application to evaluate all the possible risks and set the boundaries for the acceptable and unacceptable risks.")
* [Create a risk manually](https://www.servicenow.com/docs/01ceyFR3QN6R5ZpsVNsQrA "Risk administrators can create risk records when they see a potential for a gain or loss of value.")
* [Define the risk appetite for a risk](https://www.servicenow.com/docs/G7grJzHrF2g_xuP69WEE4w "Define the risk appetite on the risk records in the Risk Management application to evaluate all possible risks and to set the boundaries for acceptable and unacceptable risks.")