Navigating Risk Information in Supplier Profiles

Supplier profiles in SAP Ariba consolidate risk-related information from various sources into the Risk detail area. This area organizes information into several tabs, each offering unique insights into the supplier's risk landscape. Some tabs appear in all supplier profiles, while others become visible when your organization enables specific third-party providers or imports compliance data via API. These tabs allow you to evaluate various aspects of a supplier's risk profile, from overall risk exposure to specific incidents and custom data points. Understanding the risk information in the supplier profile helps you assess potential vulnerabilities and make informed decisions about your supply chain.

Every supplier risk profile includes a Risk exposure tab that provides a high-level overview of a supplier's risk. It allows you to quickly assess the supplier's current risk exposure and see exposure trends across different risk categories. Key features include:

• Overall Risk Exposure: A score from 1 to 100, indicating the supplier's overall risk level, with 100 being the riskiest. This score combines the exposure in different risk categories based on your company's priorities.
• Risk Exposure Trend Chart: A line chart displaying risk exposure trends over time for each risk category. This provides a visual indicator of whether a supplier's risk level has changed drastically, is deteriorating or improving steadily, or is consistent. You can filter the chart to view data for the last 30, 90, or 180 days.
• Category-Specific Risk Information: A section highlighting recent risk information in each category, including current risk exposure, key contributing factors, and the most recent alerts. Choosing a contributing factor link opens more detailed information.
• Export Risk Profile: You can export the supplier's risk profile as a PDF file to view it offline or send it as an e-mail attachment. The supplier risk profile PDF contains information from all the tabs in the Risk detail area of the supplier profile.

For sites with default risk categories, risk information is displayed in side-by-side columns for the four standard categories: Financial, Environmental & social, Operational, and Regulatory & legal. The risk exposure trend chart can be filtered by time period only. The chart shows all four categories as different-colored trend lines, along with a blue line representing overall risk exposure for comparison.

For sites with custom risk categories, risk information is organized in a table that you can search, filter, sort, and page through. The risk exposure trend chart can be filtered by risk category and time period. The chart displays two trend lines: a green line for your selected category's risk exposure and a blue line for the overall risk exposure, used for comparison.

All supplier risk profiles contain a Risk incidents tab that displays incidents affecting the supplier and risk alert trends. This tab includes:

• Incidents List: A summary of all the supplier's risk incidents over the past two years. You can filter the list to view incidents from the last 30, 90, or 180 days, or those reported for feedback. Choosing a summary incident link displays its details.
  Note

  When a risk incident becomes two years old, it's removed from the Risk incidents tab on the supplier's profile.

• Alerts Area: Shows alerts you've received for the supplier (if you're following them), based on your subscription settings. This area includes:
  • A bar chart showing alert trends by month, color-coded for severity level. This chart provides a quick visual indicator of changes to the number of alerts a supplier is accumulating and their severity.
  • A summarized list of alerts by incident type, which can be expanded to see detailed lists of alerts.

The Enriched corporate info tab displays detailed information about the supplier, including diversity information, corporate structure, and country/region rankings.

The information on this tab is enriched by matching the supplier to various data sources. Key components include:

• General Information: Details such as legal name and address, bankruptcy indicators, number of employees, revenue, industry, and diversity indicators.
• Corporate Structure: A chart of the supplier's corporate parentage and hierarchies, including legal name and address information for headquarters, domestic ultimate parent company, and global ultimate parent company. Hovering over any company in the family tree chart displays that company's address.
• Country/Region Profile: Moody’s rankings for the supplier's country/region in categories such as macroeconomic, political, and security risk.

The Engagement requests tab displays engagements, risk controls, and issues for the supplier. This tab is included in all supplier risk profiles by default, even if no engagements have been created for the supplier. This tab includes:

• Overall inherent risk and overall residual risk for the supplier (if configured).
• A list of active engagements for the supplier.
• A list of shared (vendor- or service-level) risk controls required by the engagements.
• A list of issues associated with engagements or controls.

The Custom data tab displays custom fields for each risk category, the risk exposure level for each category, and whether each custom field contributes to the risk exposure. This tab appears in every supplier risk profile, even if your organization hasn't created custom fields or has no custom data for the supplier. This tab includes:

• Risk category lists with custom fields mapped to each category.
• Risk exposure for all contributing factors in that risk category.
• Details for each custom field, including its name, value, update date, URL, notes, source, and whether it contributes to the supplier's risk exposure.

The Regulatory & legal tab displays detailed compliance information about the supplier's regulatory and legal risk exposure. This tab appears in a supplier's profile when your organization imports external compliance data for that supplier using the Risk Category Information API for Supplier Risk Exposure. When visible, the tab includes:

• Compliance Indicators: Information on whether a sanction or watchlist was found for the supplier, including status (violation found, violation not found, violation expired, or not screened) and screening date.
• Evidence: Information supporting the compliance violations, including provider, source, indicator, penalty amount, start date, and end date.

The Environmental & social tab provides detailed information about the supplier's environmental and social risk exposure. This tab appears in supplier risk profiles only when your organization has set up the related third-party content and service provider, EcoVadis. When enabled, the tab includes:

• Overall environmental and social risk exposure level (high, medium, or low) and risk exposure value.
• A chart showing the environmental and social risk exposure trend, based on selected score type (overall, environment, labor and human rights, ethics, or sustainable procurement) and time period.
  Note

  SAP Ariba Supplier Risk does not delete environmental and social data; this information is always visible in the supplier profile. However, the trend chart on the Environmental & social tab only shows data from the selected time period. The table next to the trend chart still displays all the relevant data.
• A table showing environmental and social score types and the supplier's risk exposure levels for each type.
• Additional risk information from EcoVadis, such as current stage, progress status, and reports with links to the EcoVadis scorecard.
• Risk incidents with links to articles, article dates, sub-incident types, and sources.

The Financial risk tab displays detailed information about the supplier's financial risk exposure. This tab becomes visible in supplier risk profiles when your organization activates a relevant third-party content and service provider. Key features include:

• Overall financial risk exposure level (high, medium, or low) and risk exposure value.
• A chart showing the financial risk exposure trend, based on selected financial score type and time period.
• A table showing financial score types and the supplier's risk exposure levels for each type.
• Additional risk information from the provider, such as ratings, commentaries, or reports. This information varies based on the third-party provider you use.
• Risk incidents with links to articles, article dates, sub-incident types, and sources.

Watch this video to learn how to navigate risk information in supplier profiles, including all five standard tabs and the three optional tabs that may appear based on your organization's configuration.

• The Risk exposure tab displays an overall risk score, trend chart, and category-specific information, with layout varying between default and custom risk categories.
• The Risk incidents tab shows incidents from the past two years and alert trends, with bar charts indicating severity levels and monthly patterns.
• The Enriched corporate info tab provides detailed supplier information, including diversity data, corporate structure charts, and country/region risk rankings.
• The Engagement requests tab displays active engagements, shared risk controls, and associated issues for the supplier.
• The Custom data tab shows custom fields mapped to risk categories, their values, contribution to risk exposure, and supporting details like sources and notes.
• Additional tabs (Regulatory & legal, Environmental & social, Financial risk) appear when third-party providers or an API provide compliance, sustainability, or financial risk data.