If auditors or examiners are requesting information on your vendors’ vendors, also known as fourth-party vendors, you may need to pump the brakes on your vendor risk management (VRM) program. Some VRM programs address only your immediate vendors (third-party vendors)...

read more