Vendor Risk Management - Licensing

Hi all,

I know VRM is now replaced by TPRM, but I need some information about licensing.

I am not looking for prices, just the structure.

Indeed I know that TPRM works with "transaction", what about VRM? It still uses this approach or it follows same logic as for ITSM? E.g. fulfiller license and business stakeholder license.

If so, when these licences come to picture? E.g. VRM fulfiller license is needed to create assessment for vendors and business stakeholder license is used bt vendors to reply to the assessment.

many thanks