Submitting Suppliers for Third-Party Risk Evaluation

Objective

After completing this lesson, you will be able to submit a supplier for third-party risk evaluation.

Third-Party Content and Service Providers

SAP Ariba Supplier Risk aggregates risk-related data from various content and service providers, offering a comprehensive view of potential risks associated with your suppliers. These third-party providers fall into two categories: default and optional.

  • Default Providers: These providers are included with your SAP Ariba Supplier Risk solution license. They offer essential risk data, such as adverse media reports, corporate data enrichment, country risk assessments, and insights into natural disasters. Default providers include Semantic Visions for adverse media, Moody’s for country risk, and the Global Disaster Alert and Coordination System for natural disasters.
  • Optional Providers: These providers offer specialized risk assessments, such as Financial and Environmental & social risk evaluations. To access their data, you must establish a license with them independently and then register your licensing credentials within SAP Ariba Supplier Risk. Optional providers include Dun & Bradstreet, RapidRatings, and Moody’s for financial risk data, and EcoVadis for environmental and social risk data.

Members of the Supplier Risk Manager group can access a list of available providers (both default and optional) on the Content and service providers page in the Supplier risk administration area.

In addition to the third-party providers listed in the Supplier risk administration area, your company can import compliance and custom field data to supplier risk profiles using the Risk Category Information API for Supplier Risk Exposure.

How to Submit Suppliers to a Provider for Risk Evaluation

Watch this video to learn how to submit a supplier to a third-party provider for risk evaluation.

Follow these steps to submit one or more suppliers to a provider for risk evaluation.

Prerequisites

  • The third-party provider must successfully complete the SAP Ariba certified partner program.
  • You can only submit active suppliers that aren't blocked for monitoring for risk evaluation.
  • Before submitting a supplier to a provider for risk analysis, you must obtain a license with that provider and enter your licensing credentials in the SAP Ariba Supplier Risk self-licensing interface.
  • Some providers may have additional requirements that must be completed in the supplier's profile before requesting risk evaluation. For example, a provider may require an external ID, which can be obtained from the provider. Members of the Supplier Risk Manager group can add the external ID to the supplier's profile.
  • You must be a member of the Supplier Risk Manager or Supplier Risk User group to submit suppliers for risk evaluation.
  • You must have registered a license with a third-party provider and submitted suppliers for evaluation to receive evaluation update notifications.

Steps

  1. Open a list of suppliers using one of the following methods:

    • Use the supplier search page.
    • Manipulate the interactive map on the Supplier Risk dashboard so that the supplier table contains the suppliers you want.
    • Go to the provider information page and choose Select suppliers.
    • Go to the supplier profile and open the tab for the desired risk type.
    • Open the Suppliers available for risk evaluation tab on the Suppliers evaluated page.
  2. Select the checkbox next to each supplier you want to submit for risk evaluation.

    Note

    When submitting to EcoVadis, you can only submit one supplier at a time.
  3. Choose Submit for risk evaluation.

  4. Select the providers you would like to submit the suppliers to for risk evaluation.

  5. Choose Done.

  6. If your evaluation is about certain risk domains, you may have additional domain-specific steps, as follows:

    • If your evaluation is from EcoVadis, you'll be prompted for additional information; fill out the dialog and choose Submit.

Result

To check the status of your evaluation, choose the Suppliers evaluated tile on the Supplier Risk dashboard or open the specific supplier profile.

Hint

Dun & Bradstreet (D&B) doesn’t return information for the supplier if the confidence score is less than 8. You may see an empty score and an empty Not enough info field if the supplier you submitted for evaluation to D&B has a confidence score below 8. You can contact D&B support for this issue and for all other matters related to D&B integration and errors.

When a supplier evaluation fails after submitting a supplier for a financial risk evaluation with Dun & Bradstreet, an error message from D&B appears on the Financial risk tab in the supplier profile. D&B has several error messages, and the message shown depends on the error. When the supplier information is updated, the supplier is automatically resubmitted for evaluation.

E-mail notifications are automatically sent to the internal users who submit suppliers to Environmental & social third-party partners for risk analysis. Notifications are sent when suppliers are submitted for risk evaluation, when supplier risk evaluation updates are received from the third-party provider, and when the supplier risk evaluation submission fails. Only one e-mail is sent per day, and it includes all three notification types (submission, update, failure).

Users automatically receive one daily e-mail notification at 4:00 a.m. EST that summarizes the adverse media alerts, licensed third-party provider evaluation updates, failure updates for third-party provider Dun & Bradstreet licenses, and supplier compliance updates from the Risk Category Information API for Supplier Risk Exposure, for suppliers they follow.

Summary

  • SAP Ariba Supplier Risk integrates data from default and optional third-party providers to assess supplier risks comprehensively.
  • Default providers are included with your license; optional providers require separate licensing and credential registration.
  • Submit active, unblocked suppliers for evaluation after obtaining provider licenses and meeting any additional requirements.
  • Monitor evaluation status through the Suppliers evaluated tile on the dashboard or individual supplier profiles.
  • Automated e-mail notifications inform users of submission confirmations, evaluation updates, and any submission failures.