This paper explores several dimensions of Vendor Risk Management. First, why are vendor risks proliferating-why now, and where do they come from? Second, what steps are necessary to manage vendor risks? And third, how can CISOs and compliance officers implement those steps in a practical way, so you don't spend all your time chasing vendors with risk management protocols?