Overcoming hidden data risks when managing third parties by Baan Alsinawi and Adriaen Morse via @infomgmt

Here are steps that will extend a risk management program to include outside vendors and reduce the likelihood of a breach due to factors outside an organization’s control.

I'd like to think that none of these are new or surprises but recent breaches and legislation (like GDPR) turn a much higher focus on this kind of thing. It's almost a master list for anything that is put out to an external organisation to complete for you.