Vendor Risk Management (VRM), also known as Third-Party Risk Management (TPRM), is the process by which an organization identifies, assesses, manages, and monitors risks arising from its relationships with external vendors, suppliers, and service providers, particularly cybersecurity risks.
