Working with Risk Alerts

SAP Ariba Supplier Risk includes predefined incident types with default severity levels. You can customize the severity levels.

Natural disaster monitoring for earthquakes, floods, and tropical cyclones is provided by Global Disaster Alert and Coordination System (GDACS). By default, these natural disasters are in the Operational risk category with a high severity.

Here are a few examples of incident types:

• Accident: Includes events like aviation disasters, building collapses, and explosions.
• Deteriorating financial situation: Covers asset forfeiture, extraordinary expenditures, stock delistings, and similar issues.
• Cyber threats: Encompasses a wide range of threats, including data leaks, phishing, and malware.
• Ethical practice: Involves issues such as animal well-being, fair labor practices, and sustainable principles.

Alert summaries include the incident type, severity, risk category, the supplier's company name, location information, and an indicator for whether you've flagged the alert. They also show the date of the last alert included in the summary, whether the incident is positive or negative, and the number of media articles represented by the summary. These articles could all refer to the same incident, or to multiple incidents of the same type.

If a supplier has alerts for multiple incident types, those alerts are listed on separate lines. You can see all of a supplier's alerts by sorting the list by company name or filtering it by company.

Incidents in the alert list are collapsed by default. To view details of all alerts in a summary, choose the right-facing arrow icon in the Details column. To collapse an expanded incident, choose the down-facing arrow icon.

The details include links to each media article in the summary, the article date, the sub-incident within the incident type, the article source, the article language, and a column indicating whether feedback was reported.

If a new alert with the same incident type appears within seven days of the most recent previous alert for a supplier, it's added to the current alert summary. If more than seven days go by and a new alert of the same incident type appears, it's added to a new alert summary.

You can filter the list by alert severity, supplier status, risk category, incident type, date range, location, and other criteria.

Follow these steps to filter the alert list:

1. On the Alert list tab, choose Filters.

   The area expands to show search filters for the alert list.

2. Choose or enter filter values.
3. Choose Search.

   The alert list now only shows the alerts that match your filter values. To restore the list to the default filters, choose Reset.

You can sort the alert list by any column. To change the order of the list, select the title of the column you wish to sort by.

When you've finished dealing with an alert, you can archive it to free up space on your alert list. Alerts are archived at the summary level. Archiving an alert doesn't remove it from the supplier's risk exposure calculation.

To archive alerts, follow these steps:

1. On the Alert list tab, select the checkbox for each alert summary you want to archive.
2. Choose Archive.

   The alerts move to the Archived alerts tab.

To move archived alerts back to the alert list, follow these steps:

1. On the Archived alerts tab, select the checkbox for each alert summary you want to unarchive.
2. Choose Restore.

   The alerts move to the Alert list tab.

You can share risk alerts with others by generating an e-mail that includes links to the alerts you choose. Alerts are shared at the summary level. For example, if an alert has five alert details, the e-mail will have links to all five. The default e-mail subject line reads, "(Name) has shared the following alerts with you from the SAP Ariba Supplier Risk Solution" but you can change it to suit your needs. Additionally, you can add comments that will appear in the body of the e-mail above the alert links.

Follow these steps to share risk alerts with others:

1. On the alert list, select the checkbox for one or more alert summary lines.
2. Choose Share.
3. Enter one or more valid e-mail addresses for people you want to share the alerts with, separated by commas.
4. Optional: Edit the e-mail subject line.
5. Optional: Add comments.
6. Choose Send.

You can flag alerts that are important to you. Alerts are flagged at the summary level. By default, alerts are not flagged, and their flag icon is black. If an alert is flagged, the flag icon is red.

To manage alert flags, perform one of the following actions:

• Flag an unflagged alert by choosing its black flag icon.
• Unflag a flagged alert by choosing its red flag icon.

You can report questionable risk incidents for feedback to the content provider. This allows you to influence how they capture and classify risk events. By providing feedback, you help improve risk monitoring and classification.

Follow these steps to report risk incidents for feedback:

1. Navigate to an incident list by performing one of the following actions:
   • On the Supplier Risk dashboard, choose the Go to alerts link in the Alert feed tile. Then, view an alert’s details by choosing the right-facing arrow in the Details column.
   • In the Risk detail area of the supplier profile, choose the Risk incidents tab.
2. Select the checkbox for any incidents you want to report for feedback.
3. Choose Report feedback.
4. In the Feedback details popup, select one or more reasons for your feedback.
5. Optional: Enter a short text comment.
6. Choose Confirm.

Incidents that you submit for feedback are marked in your alert list with a green check mark that’s visible to other users in your site. They also appear on the Adverse media feedback center list in the Supplier risk administration area.