Fourth-party risk is the risk to your organization from a supplier your vendor relies on.
For example, your payroll provider may use a separate hosting company. An outage or security problem at that host can affect your payroll service, even though you have no direct contract with the host.
Start with dependencies that support important services or handle sensitive data. Your vendor’s unrelated purchases are not equally relevant.
Read more: What Should We Ask a Vendor About Its Fourth-Party Dependencies?.
