An important component of the third-party risk management lifecycle, which occurs for the duration of the vendor relationship. This includes periodic reviews of vendor due diligence and frequent monitoring of vendor risk and performance.