.png?width=387&height=387&name=image%20(5).png)
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Glossary › Fourth-Party Risk
What is Fourth-Party Risk ?
Fourth-party risk evaluates the controls, stability, and compliance posture of entities supporting the primary vendor. These downstream providers can introduce security, operational, or regulatory risk if they lack maturity. In TPRM, identifying and monitoring fourth-party ecosystems strengthens supply chain resilience.
FAQs
Is fourth-party risk usually monitored directly?
Often indirectly through contractual requirements.
Why is it increasing?
Vendors rely heavily on subcontractors and cloud services.
How can it be reduced?
Require disclosure, audits, and subcontracting controls.
Responsible-AI TPRM Guide
Discover how risk teams apply AI responsibly to reduce third-party blind spots and stay audit-ready across global regulations.