Risk-management professionals often find the creation of a vendor risk management (VRM) program to be a challenging task, especially when it’s for an entire enterprise. An accurate vendor list and executive support are required for such a program. The challenge is this project often begins with an outdated vendor list and a need to build the business case for funding the VRM program.

WGroup Strategy Brief - Four Ways to Improve Your Vendor Risk Program (2017)