GRC Glossary

Clear definitions for professionals working across governance, risk, and compliance.

a promotional graphic telling you that PCI Compliance is no longer an annual exercise and that continuous monitory must be built in

Browse A-Z

14 terms in Third-Party Risk Management

C

Contractual Controls

Critical Supplier

Critical or Important Function

I

ICT Risk Management Framework

ICT Third-Party Service Provider

Inherent Vendor Risk

O

Ongoing Vendor Monitoring

S

Subcontracting Arrangement

Supplier Assurance

V

Vendor Assessment Questionnaire

Vendor Contingency Planning

Vendor Performance Metrics

Vendor Risk Profile

Vendor Risk Rating

Promotional banner graphic asking if you are ready for PCI DSS 4.0 with a call-to-action to get the guide