Create a supplier › Using Source-to-Pay Workspace › Use › Supplier Lifecycle Operations › Finance and Supply Chain

Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Perform risk assessment playbook

The Perform risk assessment playbook includes activities that enable you to conduct risk assessments for the supplier that you are onboarding.

The type of flow that is triggered in the Perform risk assessment playbook depends on the plugins that you have installed.

Image omitted: perform-risk-playbook.png
Perform risk assessment playbook

Plugins Installed	Playbook flow
Risk Assessments Integration for Supplier Lifecycle Operations \[com.snc.sn\_supplier\_tprm\]	The Perform risk assessment playbook flow creates risk and tiering assessments to verify the eligibility of the supplier. For more information, see Risk assessment flow when only Vendor Risk Management is installed.
- Risk Assessments Integration for Supplier Lifecycle Operations \[com.snc.sn\_supplier\_tprm\] - GRC: Third-party Risk Due Diligence \[com.sn\_tprm\_onboarding\]	The Perform risk assessment playbook flow create a due diligence request to verify the eligibility of the supplier. For more information, see Risk assessment flow when Third-party Risk Due Diligence is installed.

Risk assessment flow when only Vendor Risk Management is installed
If you have installed only the Risk Assessments Integration for Supplier Lifecycle Operations [com.snc.sn_supplier_tprm] plugin, the Perform risk assessment playbook triggers the flow that includes activities to verify the eligibility of the supplier by creating risk assessments.
Risk assessment flow when Third-party Risk Due Diligence is installed
If you have installed both the Risk Assessments Integration for Supplier Lifecycle Operations [com.snc.sn_supplier_tprm] and GRC: Third-party Risk Due Diligence [com.sn_tprm_onboarding] plugins, the Perform risk assessment playbook triggers the flow that includes activities to create a due diligence request, complete Inherent Risk Questionnaire (IRQ) assessments, and conduct risk assessments for a third-party and an engagement.