Risk Management - Is Your Service Provider Performing a Covered Function?

Right now it says before retaining a service provider to perform a covered function. And if that performed or performed negligently could be would be reasonably likely to cause a material negative impact. So pretty much every vendor, maybe it's at your low risk vendors, you know, and right, we take that into account. But before they can retain it, they have to do due diligence, nature and scope of the covered function,. potential risks resulting from the service provider performing that function.