Regulation & Governance
Primary-source analysis
NYDFS makes third-party policy a recurring control record
Section 500.11 connects third-party identification, minimum practices, due diligence, periodic reassessment, and contract guidance instead of treating a questionnaire as the whole control.
Regulation & Governance
8 min read
8 min read