What is the difference between third-party risk management and vendor risk management?

Third-party risk management covers all external entities your business relies on—vendors, partners, service providers—while vendor risk management focuses narrowly on suppliers. Vendor risk is a subset within the broader TPRM scope, which aims to secure and manage every external relationship critical to your business.