When risk leaves the building: Are organisations really managing third-party risk?
Third-party risk management requires ongoing oversight, with the frequency and depth of reviews informed by the criticality of the service being delivered, says Siva Padaychee, head of GRC and business assurance at e4.