Fourth-Party Risk

Manage fourth-party risk — the risk from your vendor's vendors. Learn the sub-processor map (especially for AI vendors, where the foundation-model provider and the cloud provider are typically critical sub-processors), the right-to-audit flow-down, sub-processor change-notification requirements, fourth-party concentration risk (everyone's sub-processor is the same hyperscaler), and the practical limits of fourth-party diligence.