Occurs when an outside event negatively impacts a third-party vendor’s ability to conduct business and impacts your organization or customers as a result. Business continuity risk can occur when a vendor fails to test business continuity and disaster recovery plans and is unprepared for technology outages and failures.