Nth-Party Risk · Principle 233 of 301
“Your supplier’s supplier is your supplier. Stop auditing one hop deep.”