Where data are being sourced from a third party, the enterprise should establish a contractually bound process to gain
confidence over the quality of the data. This could be through an independent validation of data quality controls at the
third party or through having independent checks on any material data received.