Effective vendor risk management programs evaluate, monitor and measure external thirdparty risk to assess its impact to the business or enterprise, and drive the implementation of appropriate controls to help mitigate risks.