Today, more and more organizations are outsourcing certain functions or activities to third parties so that they can provide services or products more efficiently and cost-effectively to customers and business partners. Along with the benefits of doing business with these third parties (referred to as service organizations), however, come risks that the outsourcing organization needs to identify, assess, and manage.
To help organizations manage these third-party risks, organizations and other interested parties are increasingly requesting more information about the effectiveness