A Third Party Management (TPM) risk policy sets out how we govern risks arising from outsourcing services to third party providers; this also includes consideration to the third party providers’ approach to ESG.