... evaluating, monitoring, and managing the risks associated with third-party vendors, suppliers, and service ... assessments of third-party vendors and service providers to evaluate their capabilities, controls, and ...