QuestionQ9
Third-party Due DiligenceUnder what circumstances should a Third-party Risk Issue be created?
Choose three
- A When identifying a risk to a business
- B When the third party does not include documentation required as part of an assessment
- C When a response to a question in the risk assessment is not satisfactory
- D When there is more than one third-party contact submitting responses
- E When there are items that require additional follow-up
Community Discussion