Mechanisms exist to facilitate the implementation of third-party management controls.
Does the organization facilitate the implementation of third-party management controls?