Build a risk-based third-party due-diligence plan that maps inherent exposures to decision-relevant evidence, reviewers, and completion criteria. Use when planning onboarding, renewal, material-change, or issue-driven diligence after the engagement has been scoped.
