The risk of information leaks or business interruptions caused by cyberattacks originating through third parties such as suppliers, outsourced service providers and cloud service providers. This includes management through contractual requirements, ongoing assessments and risk assessments of external services.