Due diligence is not a static, one-time event. It should be refreshed periodically, risk-based, and tailored to match the product or service provided by a third party along with the level of risk.
We've put together a checklist with items you may want to gather based on if your vendor is classified as low, moderate, or high-risk.
Download this checklist for:
- What baseline due diligence is and why it's important
- Common due diligence items for low, moderate, and high-risk vendors
- How to determine if you need additional due diligence
for your vendor
