First-party risk refers to your own business risks, in the way you operate. For example, with members of staff who take advantage of employee expenses. Alternatively, third-party risks are those that your suppliers and vendors (any partners) bring to the table, such as software that gets hacked.