--- title: Create New Third-party engagement form description: Use the create new third-party engagement form to capture all the information that you need to create a third-party engagement record in Digital resilience third-party registers using Third-party Risk Management. As a third-party risk assessor you can create a third-party engagement record. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/third-party-risk-management/tprm-create-engmt-form.html release: australia product: Third-party Risk Management classification: third-party-risk-management topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 4 breadcrumb: [Create an engagement and enhance digital resilience data, Use digital resilience third-party registers, Third-party Risk Management, Governance, Risk, and Compliance] --- # Create New Third-party engagement form Use the create new third-party engagement form to capture all the information that you need to create a third-party engagement record in Digital resilience third-party registers using Third-party Risk Management. As a third-party risk assessor you can create a third-party engagement record.
| Field | Description |
|---|---|
| Name | Unique name for the engagement. Ideally, mention the product or service that is the subject of the engagement. |
| Third party | The third party for whom you are creating this engagement record. |
| Type | Type of product or service to be provided by the engagement organization. |
| Start date | Enter start and end dates to define how long the engagement is valid. |
| End date | Preferred dates for the beginning and end of interactions with the third party. |
| Status | Select the current status of the engagement. Available options are: - **Active** - **Onboarding** - **Prospect** - **Active unauthorized** - **Terminated** - **Onboarding rejected** |
| Risk rating | Displays the risk rating assigned to the engagement after an assessment has been performed. |
| Engagement tier | The tier used for this engagement. |
| Annual spend | The annual monetary spend associated with this engagement's services. |
| Engagement manager | Specify the person who will monitor, prioritize, and act on responses to external questionnaires, issues, and tasks. Select the lock to lock/unlock the field. |
| Business owner | Specify the person who is familiar with the engagement organization and the product or services that will be engaged. Select the lock to lock/unlock the field. |
| Notes | Enter text that describes the engagement to other users. |
| Third-party engagement: Contact | |
| Street, City, State/Province, ZIP/Postal code, Country, Phone, Fax | Standard contact information for the engagement organization. |
| Latitude and Longitude | The **Latitude** and **Longitude** values are used to mark the location on the Risk concentration map. See [TPRM Risk concentration map](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/tprm-ws-risk-concentration-map.md). |
| Risk ratings | |
| Computed risk rating | Calculated **Computed risk rating**. This field is auto-filled. The value is overall risk rating for the third party, calculated after the assessment by rolling up all of the TPR assessors' risk ratings. |
| Override risk rating | Option to override the computed rating. If you select the check box, then specify the following values: - Overridden risk rating: Select the new risk rating. - Overridden on: Date that overridden risk rating or justification is updated. - Justification: Enter the reason for overriding the value. |
| Overridden risk rating | Rating that has been manually changed by a user, overriding the rating that was calculated by a system. Available options are:- **1 - Very High** - **2 - High** - **3 - Moderate** - **4 - Low** - **5 - Very Low** |
| Overridden on | Date that overridden risk rating or justification is updated. |
| Justification | Reason for overriding the value. |
| Assessment risk rating | Risk rating for the assessment. This field is auto-filled. |
| Engagement risk rating | Risk rating for the engagement. This field is auto-filled. |
| Subsidiary risk rating | Risk rating for the subsidiary. This field is auto-filled. |
| Risk intelligence rating | Score that corresponds to the likelihood and consequence of a risk event. This field is auto-filled. |
| Related lists on the form | |
| Engagement contacts | Engagement contacts for the third-party engagement. |
| Business services | Business services related to the third-party engagement. |
| Tiering assessments | Tiering assessments for the third-party engagement. |
| Repeating assessments | Repeating assessments for the third-party engagement.**Note:** You can create repeating assessments if you are using the classic assessment engine. You can configure rules that auto-generate and send questionnaires and doc requests to engagements and third parties using the Event-driven management feature if you are using the Smart Assessment Engine. For more information, see [Configure a risk assessment to recur on a schedule](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/define-repeating-vend-assess.md) and [Event-driven management — automate assessment processes](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/tprm-event-drvn-mgt-rule-create.md). |
| Assessments | Assessments for the third-party engagement. |
| Third-party risk areas | Risk areas related to the third-party engagement. |
| Issues | Issues related to the third-party engagement. |
| Tasks | Tasks related to the third-party engagement. |
| Entity types | Entity types related to the third-party engagement. |
| Digital resilience information | Digital resilience information for the third-party engagement. You can add the following parameters:- Name - Third party - Identification code of ICT third-party service provider - Type of code to identify the ICT third-party service provider - Name of the ICT third-party service provider **Note:** When the Type of code is set to LEI and you enter or update the identification code, the system validates it against the GLEIF database and auto-populates the Legal name and Country of headquarters fields. For more information, see [Validate Legal Entity Identifier codes for DORA reporting](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/third-party-risk-management/tprm-valid-lei.md). |