Third-party engagements are required to be managed according to the third-party engagement life cycle prescribed by regulatory guidance: Planning, Due Diligence, Contracting, Ongoing Monitoring, and (if applicable) Termination.