What is the primary value of maintaining a third party risk register?

• A. It provides an inventory of the risk involved in outsourcing a service across all third parties
• B. It tracks vendor payment terms
• C. It documents contract renewal dates
• D. It lists vendor marketing capabilities

Answer: (A)

A third-party risk register centralizes and inventories the risks posed by all outsourced relationships, creating a single view of exposure, controls, owners, and remediation plans. This consolidated view lets you see where your greatest risks lie across every vendor, prioritize mitigation efforts, and track progress over time, which supports governance, regulatory ready reporting, and informed decision-making.

The other items describe operational details that may be important in vendor management but are not the primary purpose of a risk register. Payment terms, contract renewal dates, and marketing capabilities don’t capture the overarching risk posture or the actions needed to reduce risk across the vendor network.