What is 'ongoing monitoring' in a third-party compliance program, and why is it required?
-
A
A one-time review conducted at contract signing
-
B
Continuous or periodic reassessment of third-party risk throughout the relationship to detect emerging issues
-
C
An annual certification from the third party that they have no compliance violations
-
D
Monitoring the vendor's social media accounts for negative press