When it comes to third-party risk management, we cannot overstate how important it is to understand who your critical vendors are. For better or worse, they can have a significant impact on your organization. That being said, in order to best mitigate risk, your third parties should be ranked as critical or non-critical for business disruption and ranked high, moderate or low, on all regulatory items.