ST0364DOJDOJ

ST0364

Risk-Based and Integrated Processes – How has the company’s third-party management process corresponded to the nature and level of the enterprise risk identified by the company? How has this process been integrated into the relevant procurement and vendor management processes?

Assess my company

Source text

As written.

Risk-Based and Integrated Processes – How has the company’s third-party management process corresponded to the nature and level of the enterprise risk identified by the company? How has this process been integrated into the relevant procurement and vendor management processes?

Change history

When and why it changed.

Present in the original catalog

This standard has not changed since it was added.

Assessed by HEXDI

What HEXDI assesses.

M2
6 — PROGRAM SETUP AND ADMINISTRATION
Risk analysis and identification considers risks posed by interactions with third parties, to include suppliers, brokers, contractors,…
M9
1 — THIRD PARTY MANAGEMENT
Program establishes a reasoned methodology for any decisions to outsource export/import compliance functions to a third party and requires…
M9
2 — THIRD PARTY MANAGEMENT
Program has procedures that define the scope of any third-party roles in export/import compliance functions and the protocols for working…
M9
3 — THIRD PARTY MANAGEMENT
Program has procedures that verify the effectiveness of any third party used in export/import compliance functions.

Other DOJ standards.

Source & revisions

First mapped: Jun 8, 2022
Last updated: Oct 28, 2026 (6d ago)
Source: Evaluation of Corporate Compliance Programs