Which process will perform risk analysis and review of all suppliers and contracts on a regular basis?

Service Level Management focuses on negotiating and monitoring service level agreements with customers, not on reviewing supplier contracts or performing supplier risk analysis.

IT Service Continuity Management is concerned with ensuring services can recover from major disruptions, not with the routine review of supplier relationships and contracts.

Service Catalogue Management maintains the service catalogue as an accurate record of live and available services, and has no remit over supplier contracts or risk.

Supplier Management owns the end-to-end relationship with all external suppliers, including negotiating and maintaining contracts. A key activity within this process is the regular review of supplier performance, contract compliance, and associated risk to ensure continued value delivery. Risk analysis of suppliers is explicitly assigned to this process in the ITIL framework.