It is easy to be overwhelmed by the overall risk profile of your third-party population.  The best way to tackle the problem is by defining specific problems and risks and then analyzing a subset of third parties as to this specific problem or risk.  On the operational side, the business can guide this inquiry, especially procurement professionals who should be familiar with the direct and...