Four Factors to Consider While Mitigating Third-Party Risk