Business rules installed with Vendor Risk Management

GRC: Vendor Risk Management adds the following business rules.

Business rule Tables Description
Add additional assignee for VRM Assessment Instance

[asmt_assessment_instance]

Add owner to vendor Business Service to Vendor

[sn_vdr_risk_asmt_m2m_vendor_service]

Calculate assessment risk score Assessment Instance

[asmt_assessment_instance]

Calculate document request risk rating Assessment Instance

[asmt_assessment_instance]

Calculate risk quantitative store Assessment Category Result

[asmt_category_result]

Calculate risk rating Assessment Category Result

[asmt_category_result]

Cancel assessment Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Cancel document request Document request

[sn_vdr_risk_asmt_m2m_asmt_doc_request]

Cancel questionnaires Questionnaire

[sn_vdr_risk_asmt_m2m_asmt_questionnaire_template]

Cancel questionnaires if assessment dele Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Check contact exists when set visible
  • Vendor Risk Issue [sn_vdr_risk_asmt_issue]
  • Vendor Risk Task [sn_vdr_risk_asmt_task]
Configure state scratchpad Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Copy template and doc requests Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Create an assessent on prior closure Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Create default metrics Assessment Metric Type

[asmt_metric_type]

Create missing category results Assessment Instance

[asmt_assessment_instance]

Create or delete score mapping
  • Assessment Instance [asmt_assessment_instance]
  • Assessment Metric Type [asmt_metric_type]
Create vendor risk assessment Repeating Assessment

[sn_vdr_risk_asmt_repeating_assessment]

Delete take links on delete Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Delete take links on update Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

l
Enforce valid state changes Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Enforce vendor when submitting issue Vendor Risk Issue

[sn_vdr_risk_asmt_issue]

Enforce vendor when submitting task Vendor Risk Task

[sn_vdr_risk_asmt_task]

Evaluate controls Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

File role for Vendor Risk Assessments Assessment Metric Type

[asmt_metric_type]

Issue assignee changed Vendor Risk Issue

[sn_vdr_risk_asmt_issue]

Issue contract changed Vendor Risk Issue

[sn_vdr_risk_asmt_issue]

Issue task changed Vendor Risk Issue

[sn_vdr_risk_asmt_issue]

Prevent adding both SIG types
  • Questionnaire [sn_vdr_risk_asmt_m2m_asmt_questionnaire_template]
  • Assessment template to Questionnaire template [sn_vdr_risk_asmt_m2m_asmt_template_questionnaire_template]
Prevent closure if has open tasks Vendor Risk Issue

[sn_vdr_risk_asmt_issue]

Prevent duplicate Business critiality Business Service Rating Scale

[sn_vdr_risk_asmt_bs_weight_config]

Questionnaire due date changed Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Remove business owner on vendor Business Service

[cmdb_ci_service]

Remove owner from vendor Business Service to Vendor

[sn_vdr_risk_asmt_m2m_vendor_service]

Remove user from vendor business owners User

[sys_user]

Restart workflow for due date change Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Review duration changes Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Send single document request Document request

[sn_vdr_risk_asmt_m2m_asmt_doc_request]

Send single questionnaire Questionnaire

[sn_vdr_risk_asmt_m2m_asmt_questionnaire_template]

Set 'Visible in vendor portal" flag Vendor Risk Issue

[sn_vdr_risk_asmt_issue]

Set actual duration Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Set actual end date Vendor Risk Task

[sn_vdr_risk_asmt_task]

Set actual start date Vendor Risk Issue

[sn_vdr_risk_asmt_issue]

Set default risk quantitative score Assessment Category Result

[asmt_category_result]

Set questionnaire due date Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Set the 'visible in vp' flag Vendor Risk Task

[sn_vdr_risk_asmt_task]

Set vendor contact if it is empty
  • Vendor Risk Task [sn_vdr_risk_asmt_task]
  • Vendor Risk Issue [sn_vdr_risk_asmt_issue]
Set vendor if parent is empty (display) Vendor Risk Issue

[sn_vdr_risk_asmt_issue]

Set vendor values from related record Vendor Risk Task

[sn_vdr_risk_asmt_task]

Submit to vendor Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Sync planned duration field Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Task assignee changed Vendor Risk Task

[sn_vdr_risk_asmt_task]

Update business owner on vendor Business Service

[cmdb_ci_service]

Update instance and category risk rating Risk Rating Scale

[sn_vdr_risk_asmt_score_mapping]

Update percent complete Vendor Assessment to Questionnaire

[sn_vdr_risk_asmt_m2m_assessment_instance]

Update scale range Risk Rating Scale

[sn_vdr_risk_asmt_score_mapping]

Validate durations Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Validate questionnaire due date Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]

Vendor finished assessment Assessment Instance

[asmt_assessment_instance]

Vendor Risk Assessment Assigned Vendor Risk Assessment

[sn_vdr_risk_asmt_assessment]