The process of identifying, assessing, and mitigating risks associated with third-party vendors, suppliers, and service providers.