Overall Risk Profile

To give one clear answer to how risky a supplier is, a single Overall Risk score will be calculated from the risk signals already held on a third party. Today that risk sits across several separate columns — predictive risk, risk domains, sanctions and PEP, country, assessments — and none of them answers the question. Overall risk cannot be sorted or reported on, because it does not exist as a number.

Key Enhancements

• one overall score: an Overall Risk score, badge and level on every third party, in the catalogue and wherever badges appear.

• columns that read in order: Overall Risk first, then Inherent Risk, Assessment, Sanctions, Country and Status.

• breakdown on hover: Inherent Risk shows the predictive score and each domain, Sanctions shows sanctions and PEP separately, and Assessment shows each finished assessment as a point on a timeline.

• honest empty state: where nothing has been scored yet, the third party reads as insufficient data rather than as low risk.

• a Risk Weights page: a new page in Configuration with one section per component, so the whole model is visible on one screen.

• weights you control: set how much Inherent Risk, Assessment, Sanctions and Country each contribute. By default Inherent Risk carries all the weight and the rest carry none, so nothing changes until you decide it should.

• weighting within components: split Inherent Risk between the predictive profile and your risk domains, then across individual domains. A new domain starts at zero until you give it weight.

• your own thresholds: set the boundaries between Low, Medium, High and Critical yourself.

• validation before saving: weights must total 100 per cent, and the page will not save until they do.

• always current: the score recalculates whenever an underlying score or a weight changes.

The manual Risk Profile field on a third party is removed. Overall Risk is calculated from your data and your weights, so it can no longer be set by hand.

This update will give one sortable, reportable measure of third-party risk, and let each customer decide what that measure is made of.