Score and review third-party vendors — multi-dimensional vendor scorecard, SLA compliance, third-party risk classification, and a defensible KEEP/REVIEW/REPLACE renewal decision. Use when user says "vendor scorecard", "vendor review", "SLA compliance", "third-party risk", "TPRM", "renewal review". Distinct from ops-procurement (which vendors to buy).