Integrating TPRM with other applications

Extend the capabilities of TPRM.

You can extend TPRM by connecting it to other Governance, Risk, and Compliance applications and to external risk data providers.

Integrating with other Governance, Risk, and Compliance applications

Link third-party risk to your broader governance, risk, and compliance program by connecting TPRM assessments to controls and risks that you manage elsewhere in Governance, Risk, and Compliance.

Associate third-party controls and control objectives from Policy and Compliance Management with a third party or engagement. For more information, see Integrating Third-party Risk Management with GRC: Policy and Compliance Management.
Associate enterprise risks from Risk Management with a third party or engagement. For more information, see Integrating Third-party Risk Management with Risk Management.

Integrating with external risk data providers

Bring external risk data into TPRM to support and continuously monitor your third-party risk assessments.

Integrate with risk intelligence providers, such as those that supply cyber, ESG, or financial risk scores. For more information, see Integrating scores from risk intelligence providers.
Integrate with EcoVadis for sustainability ratings. For more information, see Integrating EcoVadis with Third-party Risk Management.
Integrate with a risk intelligence report provider to request due diligence reports for a third party. For more information, see Risk intelligence provider integrations.
Integrating Third-party Risk Management with GRC: Policy and Compliance Management
The GRC: Policy and Compliance Management integration updates the compliance status of controls and control objectives based on the questionnaire responses from a third party or engagement. Compliance managers [sn_compliance.manager] can associate controls and control objectives with specific questions, third parties, and engagements used in Third-party Risk Management.
Integrating Third-party Risk Management with Risk Management
Integrating Risk Management with Third-party Risk Management lets you model enterprise risks and use third‑party assessments to dynamically update risk posture and scores for third parties and engagements. Optional TPRM rules can trigger assessments or remediation work when risks change.
Integrating scores from risk intelligence providers
Risk intelligence providers generate risk scores for a variety of third-party risk domains. Your organization can purchase services from providers that return data that is analogous to personal credit scores. The scores provide insight on how trustworthy and safe a particular third party can be.
Integrating EcoVadis with Third-party Risk Management
Integrating EcoVadis into your third-party risk management program can enhance your ability to assess and mitigate risks associated with sustainability and corporate social responsibility (CSR). By leveraging EcoVadis' comprehensive sustainability ratings, you can gain detailed insights into the environmental, ethical, and social practices of your third parties.
Risk intelligence provider integrations
The Third-party Risk Management application includes support for risk intelligence provider integrations. These guidelines can help your organization to develop a risk intelligence provider integration for Risk intelligence report (RIR) requests for third parties and due diligence requests.

Parent Topic:Governance, Risk, and Compliance

Streamlining the supplier risk assessment workflow

Manually add a control to a third party or engagement

Manually add a control objective to a question

Integrating Third-party Risk Management with Risk Management

title	Integrating TPRM with other applications
description	Extend the capabilities of TPRM.
locale	en-US
canonical_url	https://www.servicenow.com/docs/r/governance-risk-compliance/third-party-risk-management/integrating-with-tprm.html
release	brazil
product	Third-party Risk Management
classification	third-party-risk-management
topic_type	concept
last_updated	2026-09-10
reading_time_minutes	4
breadcrumb	Third-party Risk ManagementGovernanceRiskand Compliance