In-house risk management teams are struggling to contain risk from third parties, newly released research by consulting firm Gartner has found.