https://igguru.net/2023/09/07/white-paper-third-party-risk-management-taming-the-beast-using-information-governance/