organizations should
consider implementing appropriate
due diligence and monitoring controls
with respect to their business partners.
The clear rationalization in these
instances is that, “I can’t control the
actions of my business partners,”
when, in fact, organizations can and
do exert a fair amount of influence
over them