Managing third-party risks is challenging due to the excessive time and resources required to
identify and mitigate those risks. Necessary activities such as vendor liaison and follow–up
processes consume even more resource bandwidth during the course of those particular risk
assessments.