The process of identifying, assessing, and mitigating risks associated with third-party vendors that provide goods and services, as well as managing vendor relationships to ensure compliance with agreements and the law.