Third-Party Risk Management The process of identifying, assessing, and mitigating risks introduced by vendors, partners, and other external parties that have access to an organization's systems, data, or operations.