Third-Party Risk Management (TPRM) is the process of identifying, assessing, and managing the risks associated with an organization's third-party relationships. The goal is to ensure third-party relationships don't expose it to unnecessary risk, and are identified and mitigated.