The Vendor Risk Management Policy and Procedure Guide provides a comprehensive framework for identifying, assessing, monitoring, and managing risks associated with third-party relationships and outsourced activities. Designed to support a strong Compliance Management System (CMS), the guide helps organizations manage regulatory, operational, information security, financial, and reputational risk; strengthen oversight of vendors and service providers; and maintain examination readiness through established controls governing the third-party relationship lifecycle, risk management practices, and oversight responsibilities.