Vendors, sellers of goods or services, in operational risk management typically refer to external entities providing various operational risk management related services.