Third-Party & Supply Chain Risk Glossary

Clear definitions for risk, procurement, and compliance teams managing vendor and supply chain exposure.

Browse by category

Browse A-Z

Showing 214 terms

A

AI Bill of Materials

Access Controls

Access Revocation

Access and Audit Rights

Article 28 Requirements

Article 30 Requirements

B

Breach Notification Clause

Business Associate

D

DORA Oversight Framework

Data Confidentiality

Data Flow Mapping

Data Integrity Risk

Data Location Clause

Data Portability

Data Processing Activities

Data Protection Clause

Data Return and Deletion

Data Return and Destruction

Digital Operational Resilience

Disaster Recovery

Downstream Dependency

E

EBA Guidelines on Sound Management of Third-Party Risk

EBA Guidelines on Third-Party Risk

EBA Outsourcing Guidelines

Ethical Procurement

Exit Management

Extended Enterprise

F

Financial Condition Review

Financial Viability

Financial Viability Review

Fourth and Nth Party Management

Fourth-Party Disclosure

Fourth-Party Visibility

G

Going Concern Assessment

H

Hardware Bill of Materials

Hardware Supply Chain Risk

Health Insurance Portability and Accountability Act

I

ICT Concentration Risk

Implementing Technical Standards

Incident Containment

Incident Escalation

Incident Impact Assessment

Incident Reporting

Insolvency Risk Assessment

Insurance Requirements

Interagency Guidance on Third-Party Relationships

Interdependency Analysis

Intragroup Arrangement

J

Joint RTS on Subcontracting

K

Key Performance Indicator

L

Liability and Indemnification

Lifecycle of Third-Party Arrangements

Likelihood Assessment

M

Major ICT-Related Incident

Major Incident Classification

Malicious Code Insertion

Mandatory Contractual Provisions

Materiality Threshold

Modern Slavery Statement

Multi-Tiered Risk Management

Multi-Vendor Strategy

N

NYDFS 23 NYCRR 500

National Competent Authority

Nested Inventory

Notification Timeline

O

OCC Bulletin 2013-29

Operational Risk

P

Performance Metrics

Performance Monitoring

Performance Scorecard

Policies, Standards, and Procedures

Pre-Contractual Assessment

Pre-Outsourcing Risk Evaluation

Product Integrity

Program Maturity

Provider Concentration

Provider Concentration Risk

R

Real-Time Monitoring

Regulatory Notification Clause

Regulatory Technical Standards

Relationship Owner

Remediation Tracking

Reporting and Escalation

Reputational Risk

Reputational Screening

Responsible Procurement

Right to Terminate

Risk Categorization

Risk Governance Framework

Risk-Tiered Monitoring

S

SBOM Minimum Elements

SEC Cyber Disclosure Rules

SR 23-4: Interagency Guidance on Third-Party Relationships: Risk Management

SR Control Family

Safe and Sound Operation

Section 54 Reporting

Secure Development Practices

Secure by Design

Security Controls

Security Questionnaire

Security Rating

Security Rating Scale

Senior Management Oversight

Service Credits

Service Delivery Management

Single-Provider Dependency

Slavery and Human Trafficking Statement

Software Component Transparency

Software Supply Chain Attack

Software Supply Chain Security

Standardized Control Assessment

Sub-Outsourcing

Sub-Outsourcing Chain

Sub-Outsourcing Clause

Sub-Outsourcing Provisions

Sub-Processor Disclosure

Sub-Tier Provider

Sub-Tier Supplier

Sub-Tier Supplier Mapping

Subcontracting Chain

Subcontracting Chain Risk

Subcontracting of ICT Services

Substitutability

Substitutability Assessment

Substitutability at Exit

Supplier Compliance Audit

Supplier Criticality Level

Supplier Incident Planning

Supplier Relationship Management

Supply Chain Dependency

Supply Chain Dependency Mapping

Supply Chain Detection and Response

Supply Chain Illumination

Supply Chain Resilience

Supply Chain Visibility

Sustainable Procurement

T

Termination Rights

Tested Exit Strategy

Third-Party Arrangement

Third-Party Relationship

Third-Party Risk Rating

Threat Intelligence Integration

Threat Notification

Transitive Dependency

U

UK Modern Slavery Act

V

Vendor Breach Management

Vendor Ecosystem Mapping

Vendor Inventory

Vendor Performance Review

Vendor Risk Management Lifecycle

Vendor Risk Management Maturity Model

Vendor Risk Management Office

Vendor Risk Tiering and Classification

Vendor Selection

Vendor Termination or Exit Procedures

W

a promotional banner asking how ready are you for PCI DSS 4.0? With a call-to-action to get the checklist now.