This section covers how to assess third-party risk, maintain vendor records, and document due diligence.