Default Third-Party Due Diligence Attributes
The following are the default Third-Party Due Diligence attributes available in the application. For information about creating and configuring your own attributes, see Adding, Editing, and Deactivating Third-Party Attributes.
The minimum attributes required to activate Third-Party Due Diligence screening results are:
-
Entity Type
-
Country
-
First Name
-
Last Name
-
All the Dow Jones attributes are also required, but they automatically activate when a user requests the first screening.
-
Any attribute labeled as a System attribute in the UI is a default attribute.
-
Some attributes are unable to be deactivated because they are part of core system functionality.
Default Third-Party Attributes
|
Name |
Description |
Response Type |
Editable? |
|---|---|---|---|
|
Additional identification code of ICT third-party service provider |
Additional code to identify the ICT third-party service provider, where available. |
Text |
|
|
Address |
Primary street address where the third-party is located. |
Text |
Yes |
|
Address 2 |
Secondary street address where the third-party is located. |
Text |
Yes |
|
Adverse Media (organization) |
The adverse media associated with an organization. |
Score |
No |
|
Adverse Media (person) |
The adverse media associated with a person. |
Score |
No |
|
Aggregate Risk Score |
Overall risk score associated with vendor. |
Score |
No |
|
Aggregate Inherent Risk Score |
Overall inherent risk score associated with Vendor. |
Score |
No |
|
Aggregate Target Risk Score |
Overall target risk score associated with Vendor. |
Score |
No |
|
AI Use |
Track and quantify a vendor's use of AI technology. |
Single Select |
|
|
Alternative First Name |
The alternative first name for a person. |
Text |
Yes |
|
Alternative Last Name |
The alternative last name for a person. |
Text |
Yes |
|
Alternative Middle Name |
The alternative middle name for a person. |
Text |
Yes |
|
Alternative Name |
Use this field to identify an alternative name for the organization. Note that information in this field is informational only and does not get submitted for screening |
Text |
Yes |
|
Applicable surveillance or security laws |
Applicable surveillance and security laws, judgements or other legal frameworks. |
Multi Select |
|
|
Bank Identifier Code / SWIFT Code |
Bank Identifier Code / SWIFT Code |
Text |
|
|
BitSight Domain |
Domain from the BitSight platform. |
Text |
|
|
BitSight Industry |
Industry for the vendor from BitSight. |
Text |
|
|
BitSight Rating |
Rating for the vendor from BitSight. |
Text |
|
|
BitSight Rating Date |
Date of last Rating from BitSight. |
Date |
|
|
Board Member |
A person that is a board member of a state-owned company. |
Score - Standard |
No |
|
Business Owner |
Name of the internal owner sponsoring the vendor. |
Single Select |
|
|
Central Registration Depository (CRD) |
Central Registration Depository (CRD) |
Text |
|
|
City |
The city where the third-party is located. |
Text |
Yes |
|
Classification |
How a vendor is classified |
Single Select |
|
|
Company Identification Number |
Company Identification Number |
Numerical - Text |
|
|
Contact Phone number |
Contact Phone Number |
Text |
|
|
Country |
The country or territory where the third-party is located. |
Single Select |
Yes |
|
Country of the ICT third-party service provider’s headquarters |
Identify the ISO 3166–1 alpha–2 code of the country in which the global operating headquarters of ICT third-party service provider are located. |
Single Select |
|
|
CPI Risk Score |
The range displayed contributes to the calculation of the initial risk score.
Note:
Activate this attribute and include a Country attribute to generate risk scores. |
Score - Standard |
No |
|
CPI Score |
The score provided by Transparency International based on various criteria to indicate geographic risks. Countries lacking a CPI Score are marked as N/A.
Note:
Activate this attribute and include a Country attribute to generate scores. |
Text |
No |
|
Created By |
The name of the person who created the linked entity. |
Text |
No |
|
Created Date |
Date when the record was created |
Date |
|
|
Critical Information Infrastructure Operator |
Indicates if the vendor a Critical Information Infrastructure Operator. |
Single Select |
|
|
Criticality |
How critical the vendor is to the business |
Single Select |
|
|
Currency of the amount reported in total annual expense or estimated cost of the ICT third-party service provider |
Identify the ISO 4217 alphabetic code of the currency used to express the amount in b_05.01.0070 |
Single Select |
|
|
Data Collected |
Data Collected under the EU-U.S. Privacy Shield |
Text |
|
|
Data Processing Agreement |
Is there a contract governing privacy issues between the two organizations? |
Single Select |
|
|
Date of Birth |
The date of birth can improve the accuracy of screening results. |
Date |
Yes |
|
Date of oldest pending Dow Jones result |
Date of the oldest unreviewed result. |
||
|
Date of the last audit on the ICT third-party service provider |
Use this column to provide the date of the last audit on the specific ICT services provided by the ICT third-party service provider. This column relates to audits conducted by:(i) the internal audit department or any other additional qualified personnel of the financial entity,(ii) a joint team together with other clients of the same ICT third-party service provider (pooled audit) or (iii) a third party appointed by the supervised entity to audit the service provider. This column does not relate to the reception or reference date of third-party certifications or internal audit reports of the ICT third-party service provider, the annual monitoring date of the arrangement by the financial entity or the date of review of the risk assessment by the financial entity. This column shall be used to report all types of audits performed by any of the subjects listed above concerning fully or partially the ICT services provided by the ICT third-party service provider.To report the date, the ISO 8601 (yyyy–mm–dd) code shall be used. If no audit has been performed, it shall be filled in with ''9999-12-31'. |
||
|
Description |
Description of the vendor |
Text |
|
|
Dow Jones pending result type |
Describes whether results are from screening or monitoring. |
Multi Select |
|
|
Dow Jones results pending review |
The number of unreviewed results |
Numerical - Text |
|
|
VendorsDJNthPartyRisks |
Dow Jones Nth Party Screening Risks |
Multi Select |
|
|
Driving License Number |
Driving License Number |
Text |
|
|
DUNS Number |
The DUNS number is an identifier provided by Dun & Bradstreet. |
Text |
Yes |
|
Enhanced Country Risk |
Vessels that are either flagged or associated with Cuba, Iran, North Korea and Syria. |
Score |
No |
|
Entity Type |
Identifies whether an entity is a person or organization to associate proper attributes and optimize screening results. |
Single Select |
No |
|
Privacy Shield - Covered Entities |
Privacy Shield - Covered Entities |
Text |
|
|
EU-US-DPF Notice Link |
Privacy Shield Notice Link |
Text |
|
|
EU-US-DPF Status |
EU-U.S. Privacy Shield Status |
Single Select |
|
|
External ID |
This field contains a unique identifier for the record from a system outside of OneTrust. |
Text |
|
|
First Name |
First name |
Text |
|
|
Frequency of Transfer |
Frequency of transfers |
Text |
|
|
Gender |
The gender identity of the individual currently monitored by Dow Jones. Adding the gender can improve the accuracy of screening results. |
Single Select |
No |
|
ID |
The unique identifier for the third-party record. |
Text |
Yes |
|
Identification code of ICT third-party service provider |
Code to identify the ICT third-party service provider. Where LEI is used, it shall be provided as a 20-character, alpha-numeric code based on the ISO 17442 standard. Where EUID is used, it shall be provided as specified in Article 9 of the Commission Implementing Regulation (EU) 2021/1042. |
||
|
Identification code of the ICT third-party service provider’s ultimate parent undertaking |
Code to identify the ICT third-party service provider’s ultimate parent undertaking. |
||
|
Type of person of the ICT third-party service provider |
One of the options in the corresponding dropdown list shall be used.Providing the LEI is mandatory for legal person including natural persons acting in a business capacity |
Single Select |
|
|
International Maritime Organization (IMO) Ship Number |
International Maritime Organization (IMO) Ship Number |
Text |
|
|
International Securities Identification Number |
International Securities Identification Number |
Numerical - Text |
|
|
VendorsIsGlobalAttributeConfiguration |
Indicates if global setting for attribute. |
Single Select |
|
|
Is Master |
Indicates if an Inventory is a master |
Single Select |
|
|
Last Name |
The last name. |
Text |
Yes |
|
Last Updated By |
Name of the user who last updated the record. |
Single Select |
|
|
Last Updated Date |
Date when the record was last updated. |
Date |
|
|
Legal Entity Identifier (LEI) |
Legal Entity Identifier (LEI). |
Text |
|
|
Location |
Country where the vendor is headquartered. |
Single Select |
|
|
Master Record |
Master Inventory Business Key for a Child Inventory. |
Text |
|
|
Middle Name |
The middle name. |
Text |
Yes |
|
Monitoring Enabled |
Indicates that the third party is currently monitored by Dow Jones. |
Single Select |
No |
|
NACE (European Union Economic Activity Classification |
NACE (European Union Economic Activity Classification |
Text |
|
|
Name |
Name of the vendor |
Text |
|
|
Name of the ICT third-party service provider in Latin alphabet |
Name of the ICT third-party service provider in Latin alphabet. Where the name of the ICT third-party service provider reported in B_05.01.0050 is in Latin alphabet, it shall be repeated also in this data field. |
||
|
National ID |
National ID |
Text |
|
|
National Provider Identifier |
National Provider Identifier |
Numerical - Text |
|
|
National Tax Number |
National Tax Number |
Text |
|
|
Next EU-U.S. Certification Date |
Next EU-U.S. Certification Date |
Date |
|
|
No Match |
No profiles matched the screening criteria. |
Score-Standard |
No |
|
North American Industry Classification System (NAICS) |
North American Industry Classification System (NAICS) |
Numerical - Text |
|
|
Nth-party Dow Jones pending results |
Indicates when any related nth party records have unreviewed results. |
Single Select |
|
|
Nth-party Dow Jones risks |
Dow Jones Nth Party Screening Risks |
Multi Select |
|
|
Organization |
The organization responsible for the third-party record. |
Single Select |
Yes |
|
Original EU-U.S. Certification Date |
Original EU-U.S. Certification Date |
Date |
|
|
Other Exclusion List |
Lists typically excluding persons or organizations from public sector activities. |
Score - Standard |
No |
|
Other Official List |
Lists compiled by supervisory authorities, regulators and law enforcement agencies. |
Score - Standard |
No |
|
Passport Number |
Passport Number |
Text |
|
|
Personal Data Disclosure/Access |
The vendor has access or handles personal data on behalf of the organization. |
Single Select |
|
|
Phone |
Contact phone number. |
Numerical - Text |
|
|
Politically Exposed Person |
Senior ranking public officials (both governmental and non-governmental). |
Score - Standard |
No |
|
Postal Code |
Postal Code |
Text |
|
|
Primary Vendor Contact |
Name of the vendor's primary contact. |
Single Select |
|
|
Processing Activity Locations |
Indicates where the vendor processes personal data. |
Multi Select |
|
|
Product/Service |
The specific product or service that the vendor provides |
Text |
|
|
Purpose of Data Collection |
Purpose of Data Collection |
Text |
|
|
Rank |
If the ICT third-party service provider is signing the contractual arrangement with the financial entity, it is considered as a direct ICT third-party service provider and the ‘rank’ to be reported shall be 1;If the ICT third-party service provider is signing the contract with the direct ICT third-party service provider, it is considered as a subcontractor and the ‘rank’ to be reported shall be 2;The same logic apply to all the following subcontractors by incrementing the ‘rank’.In case multiple ICT third-party service providers have the same ‘rank’ in the ICT service supply chain, financial entities shall report the same ‘rank’ for all those ICT third-party service providers. |
Text |
|
|
Relative or Close Associate |
Persons identified as a Relative or Close Associate of a PEP |
Score |
|
|
Sanctions |
A person or organization that is subject to comprehensive or targeted restrictive measures. |
Score - Standard |
No |
|
Sanctions Control (ownership) |
Indicates an organization either owned or controlled by sanctioned persons or organizations listed on an OFAC or EU sanctions program. |
Score - Standard |
No |
|
Screening Completed Date |
Date & time (UTC) the most current screening was completed. |
Date |
No |
|
Security measures |
Security measures applied to the transfers of information. |
Multi Select |
|
|
Social Security Number |
Social Security Number |
Numerical - Text |
|
|
Standard Industrial Classification (SIC) |
Standard Industrial Classification (SIC) |
Numerical - Text |
|
|
State/ Providence/ District |
State/province/district where the third party is located. |
Text |
Yes |
|
State-Owned Company |
Any corporate structure where a government body owns 1% or more, holds majority voting control, and/or has the power to appoint a majority of the members of the organization's administrative, managerial or supervisory bodies. |
Score - Standard |
No |
|
Status |
The current status of the third-party record. |
Single Select |
Yes |
|
Subprocessors or subcontractors locations |
Location of the subprocessors and subcontractors |
Multi Select |
|
|
Substitutability of the ICT third-party service provider |
Use this column to provide the results of the financial entity’s assessment in relation to the degree of substitutability of the ICT third-party service provider to perform the specific ICT services supporting a critical or important function. One of the options in the corresponding dropdown list shall be used. |
Single Select |
|
|
VendorsSwissUsDpfStatus |
Swiss-U.S. Data Privacy Framework Status |
Single Select |
|
|
Third Party Type |
Identifies whether the third party is a person or organization. |
Single Select |
Yes |
|
Total annual expense or estimated cost of the ICT third-party service provider |
Annual expense or estimated cost for using the ICT services provided by the ICT third-party service provider to the entities making use of the ICT services |
Numerical - Text |
|
|
Transfer Assessment Result |
Transfers to this vendor have been deemed safe or unsafe based on your data transfer assessments. |
Single Select |
|
|
Type |
The type of product or service that the vendor provides. |
Single Select |
|
|
Type of additional identification code to identify the ICT third-party service provider |
The type of additional code to identify the ICT third-party service provider reported in B_05.01.0030: 1. ‘LEI’ for LEI 2. ‘EUID’ for EUID 3. CRN for Corporate registration number 4. VAT for VAT number 5. PNR for Passport Number 6. NIN for National Identity Number LEI or EUID shall be used for legal persons, as identified in B_05.01.0070, whereas alternative code may be used only for an individual acting in a business capacity. Only LEI shall be used for legal persons that are not established in the Union. |
Text |
|
|
Type of code to identify the ICT third-party service provider |
Identify the type of code to identify the ICT third-party service provider in b_05.01.0010. ‘LEI’ for LEI, ‘EUID’ for EUID, ‘Country Code’+Underscore+’Type of Code’ for non LEI code, Country Code: Identify the ISO 3166–1 alpha–2 code of the country of issuance of the other code to identify the ICT third-party service provider. Type of Code: CRN for Corporate registration number, VAT for VAT number, PNR for Passport Number, NIN for National Identity Number. |
Single Select |
|
|
Type of code to identify the ICT third-party service provider’s ultimate parent undertaking |
Identify the type of code to identify the ICT third-party service provider’s ultimate parent undertaking in b_05.01.0080.‘LEI’ for LEI,‘Country Code’+Underscore+’Type of Code’ for non LEI code,Country Code: Identify the ISO 3166–1 alpha–2 code of the country of issuance of the other code to identify the ICT third-party service provider,Type of Code:CRN for Corporate registration number,VAT for VAT number,PNR for Passport Number,NIN for National Identity Number. |
Single Select |
|
|
Type of person of the ICT third-party service provider |
One of the options in the corresponding dropdown list shall be used.Providing the LEI is mandatory for legal person including natural persons acting in a business capacity |
Single Select |
|
|
VendorsUkUSDpfExtensionStatus |
UK-U.S. Data Privacy Framework Extension Status. |
Single Select |
|
|
Vendor Assessment |
Has the vendor been assessed for compliance with applicable legal and contractual requirements? |
Single Select |
|
|
Vendor Contact |
Privacy Shield Vendor Contact |
Text |
|
|
Vendor ID |
ID of vendor for matching with external systems |
Text |
|
|
Vendor Rating |
Vendor score |
Single Select |
|
|
Workflow |
Vendor Workflow |
Single Select |
|
|
Stage |
Vendor Workflow Stage |
Single Select |
|
|
View Vendor in BitSight |
This link will bring you to vendor record in the BitSight platform |
Text |
|
|
Website |
Website |
Text |