https://www.rede-consulting.com/post/navigating-the-third-party-risk-management-lifecycle