AEP’s third-party risk governance program was developed to identify potential risks introduced through third-party relationships, such as vendors, software and hardware manufacturers or professional services providers.