
Third-party risk management (TPRM) is a structured process designed to identify, assess, mitigate, and monitor risks stemming from relationships with external vendors, service providers, agents, or intermediaries. These risks can span operational failures, compliance breaches, reputational damage, and cybersecurity exposures.