Risk present if the vendor’s products, services, channels, and processes are critical to the organization’s operations.