Effective Third-Party Risk Assessment - A Balancing Process

http://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=657