ServiceNow Vendor Risk Management

Discover how ServiceNow vendor risk management automates onboarding, credential delivery, and assessments, enables multi-contact invitations, tracks risk and completion, and enforces segregation of duties among tier assessors.

Activate the vendor risk management plugin, assign admin and four roles (risk manager, risk assessor, reviewer, vendor contact), and follow the end-to-end process from onboarding to closure.

onboard a vendor in ServiceNow by creating vendor profiles and contacts, importing data via manual entry, import sets, or integration, and managing the primary contact and portal invitations.

Discover how internal tier assessors use weighted questions across data and services categories to calculate vendor tier by averaging scores.

Explore a ServiceNow vendor risk management demo: set up vendor risk tiers, build metric categories and questions, assign two-tier assessors from HR, and compute vendor tier via a weighted score.

Learn how the vendor risk assessment template, containing a questionnaire and document request template, is created by the vendor risk manager and assigned to a risk assessor, with weighted scoring.

Demonstrates two vendor risk management methods: the demand approach and the automated approach, including sending a vendor risk assessment and using assessment templates.

Access the vendor risk assessment portal in the production instance, manage primary contacts, assign assessments, attach documents, and submit responses to complete the evaluation.

Learn to generate an observation by reviewing assessment responses, calculating risk ratings, creating issues, and communicating with vendor contacts within ServiceNow vendor risk management.

Set up repeating assessments to monitor vendor risk in service now, selecting frequency by vendor tier or risk rating and tracking initial and next assessment dates.

Set up an unwritten rule to automatically generate issues from vendor risk questionnaires, using an issue template and an optional task template, triggered by questionnaire responses.

Learn how to automatically create and send vendor risk assessments using submission rules triggered by vendor tier or third-party security score, with integration to security providers for continuous automated monitoring.

Learn how submission rules automate vendor risk management by triggering tier changes or security score updates to create or submit vendor risk assessments, with templates and optional manual submission.