---
title: Manually add a control to a third party or engagement
description: If you’re using both Policy and Compliance Management and Third-party Risk Management, you can associate controls with third parties and engagements. Controls can be marked as compliant or non-compliant.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/third-party-risk-management/tprm-add-controls-tp.html
release: australia
product: Third-party Risk Management
classification: third-party-risk-management
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 3
breadcrumb: [TPRM with Policy and Compliance Management, Integrate, Third-party Risk Management, Governance, Risk, and Compliance]
---

# Manually add a control to a third party or engagement

If you’re using both Policy and Compliance Management and Third-party Risk Management, you can associate controls with third parties and engagements. Controls can be marked as compliant or non-compliant.

## Before you begin

Role required: sn\_compliance.manager and sn\_vdr\_risk\_asmt.vendor\_risk\_manager to associate controls in the Vendor Management Workspace.

## About this task

Controls and control objectives are created and managed in Policy and Compliance Management and can then be associated with third parties or engagements.

Controls are automatically generated when you associate a policy with an entity type or an entity type with a control objective. A control is created for each entity listed in the entity type for the control objective. Controls can also be manually associated with a third party or engagement.

For more information on creating policies in Policy and Compliance Management, see [Create a policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/t_DefineAPolicy.md).

To understand the difference between a control objective and a control, see [Structural overview of Policy and Compliance Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/pc-structural-overview-policy-comp.md).

## Procedure

1.  Navigate to **Workspaces** > **Vendor Management Workspace**.

2.  Select the list icon \[Omitted image "ws-list-icon.png"\] Alt text: and then navigate to **Third parties** > **All third parties** or **Engagements** > **All engagements**

3.  Select the third party or engagement that you want.

4.  Navigate to the **Controls** tab of the third party or engagement.

5.  Assign a control to the engagement by selecting **New**.

6.  On the form, fill in the fields.

    For descriptions of all these fields, see [Create new control form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/tprm-control-record-form.md).

7.  Select **Submit**.

    For more information on managing controls, see [Manage controls](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/c_GRCControls.md).

    The control is associated with the third party or engagement and all related lists are visible.


-   **[Create new control form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/tprm-control-record-form.md)**  
Use the create new control form to capture all the information that you need to associate a control with a third party or engagement using the Third-party Risk Management application.

**Parent Topic:**[Integrating Third-party Risk Management with GRC: Policy and Compliance Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/pc-assessment-integration.md)

**Related topics**  


[Integrating Third-party Risk Management with GRC: Policy and Compliance Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/pc-assessment-integration.md)

[Create new control form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/tprm-control-record-form.md)

[Manually add a control objective to a question](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/tprm-add-controls-q.md)

[Control objectives form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/tprm-control-objective-form.md)