What governance role provides objective risk assessments and oversight in TPRM?

• A. Vendor account manager
• B. Independent risk function
• C. Legal counsel
• D. IT help desk

Answer: (B)

An objective, independent risk function provides the unbiased risk assessments and governance oversight needed in third-party risk management. Because it operates outside the day-to-day vendor relationship and commercial pressures, it can apply standardized risk methodologies, gather data across all vendors, assign impartial risk ratings, and continuously monitor risk exposure. It has the authority to challenge decisions, require remediation, and escalate issues to governance bodies such as risk committees or the board. This independence ensures assessments aren’t swayed by procurement interests or operational push, which is essential for effective TPRM governance. The other roles focus on specific areas—vendor account management centers on relationship and performance; legal counsel handles contractual and legal risk; IT support deals with technical issues—so they don’t provide the ongoing, objective risk oversight needed across the vendor portfolio.