A vendor who represents a great deal of risk to an organization based on the criteria laid out in risk management policies.
.