Monitor third-party vendors for breach events, ransomware mentions, dark-web chatter, and public incident disclosures. R