https://www.lifars.com/knowledge-center/mitigating-third-party-risk/