Key reasons third-party risk management programs fail

An industry analysis highlights Gartner’s finding that over 80% of organizations faced third‑party-related disruptions despite TPCRM investments, attributing poor outcomes to self-attested questionnaires, process-heavy workflows, and limited visibility at scale. Experts recommend business-aligned risk communication, tracking risk acceptance, joint incident response planning with critical vendors, collaborating to mature partner practices, adopting tiered risk models, and leveraging AI for continuous, real-time monitoring and predictive analytics to boost resilience and ROI in software supply chain risk management.