---
title: What is Fourth-Party Risk Management?
description: Click here to learn about Fourth-Party Risk Management.
---

[Ecosystem Terminology ](https://www.cybersaint.io/cybersecurity/glossary)

# [What is Fourth-Party Risk Management?](https://www.cybersaint.io/cybersecurity/glossary/what-is-fourth-party-risk-management)

 Written by [David Quaid](https://www.cybersaint.io/cybersecurity/glossary/author/david-quaid) | Mar 4, 2024 9:36:46 PM

Fourth-party risk management (FPRM) is an extension of third-party risk management (TPRM) and refers to the process of identifying, assessing, and mitigating the risks associated with an organization's fourth-party relationships. In essence, fourth-party risk management deals with the risks posed by the vendors and subcontractors of an organization's third-party service providers.

To provide a clear understanding, let's break down the relationships involved:

First Party: This is the organization itself, which seeks to procure goods or services from third-party vendors or service providers.

Third Party: The organization directly contracts with vendors or service providers to provide goods or services. This is the primary focus of traditional third-party risk management (TPRM).

Fourth Party: Fourth parties are the vendors, subcontractors, or partners that the third-party service provider may engage with to fulfill their contract obligations with the organization. These fourth parties are indirectly connected to the organization.

[Return to Ecosystem Terminology Glossary ](https://www.cybersaint.io/cybersecurity/glossary)

[View full post](https://www.cybersaint.io/cybersecurity/glossary/what-is-fourth-party-risk-management)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "David Quaid"
  },
  "dateModified" : "2025-05-07T12:59:40.277Z",
  "datePublished" : "2024-03-04T21:36:46Z",
  "headline" : "What is Fourth-Party Risk Management?",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.cybersaint.io/cybersecurity/glossary/what-is-fourth-party-risk-management",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Ecosystem Terminology"
  }
}
```