Clear process, including required due diligence to manage 3rd parties engagement