Working with Risk Engagement Policies

Risk engagement policies determine which non-catalog requests require an engagement request to be created in SAP Ariba Supplier Risk. Engagement request policies help mitigate risk with non-catalog purchases by evaluating suppliers on a deeper level. Engagement requests evaluate suppliers using questionnaires created by risk experts.

​You configure these policies to decide which factors trigger an engagement request.​

Users are notified if an engagement request is required when choosing a supplier, and you can customize the message. For example, the message could be specific, such as "When users from the U.S. create a non-catalog request for chemical fertilizers and plant nutrients, the amount is greater than $25,000, from ACME, Top Chemical, or Fred's Fertilizer, users are required to submit an engagement request."

Risk engagement policies are imported to guided buying via the risk engagement policy file. Additionally, administrators must set the PARAM_ENABLE_SUPPLIER_RISK_INTEGRATION parameter to true, and ​enable the self-service configuration parameter Application.SM.RiskLevelSearchFilter in SM Administration to use the risk filter in the search page.​​

The risk engagement policies evaluate fields in non-catalog requests for specific values. When users select a supplier for a purchase request, an engagement request is triggered if the commodity code, amount, and chosen supplier are in the risk engagement policies. There can only be one engagement request attached to each non-catalog request. The engagement request must be approved before the purchase request can be submitted.