The healthcare sector in Malaysia is rapidly digitizing, driven by government initiatives, private sector investments, and the increasing demand for efficient patient care. With this transformation comes a growing reliance on third-party vendors for software, cloud storage, medical devices, and IT infrastructure. However, third-party relationships also introduce significant risks, including data breaches, regulatory non-compliance, and service disruptions. Healthcare IT leaders must have a robust Third-Party Risk Management (TPRM) strategy to safeguard sensitive patient data and ensure seamless operations.