We have adopted a Vendor Risk Management and Procurement Policy that establishes our expectations when engaging with a thirdparty service provider, including requiring a criticality assessment and a review of regulatory and compliance status.