d7c32c86-275f-4885-a55f-2dc5e5015106

The CECO’s guide to managing third parties

Third parties present an enormous risk that must be closely managed. A well-designed compliance program should apply risk-based due diligence and have a process for the full lifecycle of third-party risk management.

Download this eBook to learn the six steps in the lifecycle of risk-based third-party due diligence:

  • Business justification
  • Triage
  • Questionnaire to third party
  • Due diligence on third party
  • Compliance terms and conditions, including payment terms
  • Management and oversight of third parties after contract signing

In this guide, we’ll explore each of these steps in detail, so you can fully operationalize your third-party risk management program.


In exchange for this resource, we request you to provide us with some of your personal details above. This is to enable OneTrust to reach out to you with information about related OneTrust products, services, exclusive offers, resources and special events. To read more about how OneTrust may use your information, read OneTrust’s Privacy Policy.  Please tick this box if you consent.