Citalid Third-party Cyber Risk Management (TPRM) is a platform for modeling, prioritizing, and managing cyber risks originating from third-party suppliers and vendor ecosystems. **Supplier Risk Prioritization** The platform ranks suppliers based on business criticality, threat exposure, and potential financial impact. Each supplier is automatically mapped to its industry sector, enabling contextualized threat exposure scoring and maturity benchmarking. **Assessment & Data Collection** Customizable online questionnaires can be sent to suppliers. Responses are collected automatically and enriched with data from external scans and sources. AI is used to automate questionnaire completion. **Risk Analysis & Visualization** A consolidated risk view is generated per supplier, including exposure score, estimated attack frequency, and resilience ratio (exposure compared to revenue). Suppliers can be filtered by criticality and data exported to BI or visualization tools. **Lateral Risk & Propagation Modeling** The platform models indirect impacts from critical suppliers, visualizing propagation paths, induced losses, and potential downtime across business processes and strategic assets. Attack scenarios can be simulated where suppliers act as infection vectors, estimating systemic operational, financial, and regulatory impacts. **Regulatory Alignment** Evaluations can be aligned with regulatory requirements such as DORA and NIS2, and third-party risks can be connected to an organization's broader internal risk map. The platform integrates with Citalid Core for lateral risk modeling and supports data export to BI and visualization tools.