Identification and management of risks from vendors' own vendors (fourth parties) and excessive dependency on single providers across the vendor.