What type of due diligence do you perform, if any, on governmental agencies you are required by law to use? Does your response change if the agency acts outside of state government, but was established by state statute?
------------------------------Mark Ewert, CPCU, CICDirector Vendor ManagementPenn National Insurance------------------------------
We don't' do due diligence on federal or state government agencies. This is our practice but like to hear others. Thank you!
Why type of due diligence do you perform, if any, on governmental agencies you are required by law to use? Does your response change if the agency acts outside of state government, but was established by state statute?
We do not perform due diligence on organizations that we must use but have no influence over such as Federal Reserve, government agencies, and utilities.
We exempt Governments, Government Agencies, and Government Sponsored Entities (GSE).
It does get tricky when the provider is not quite a GSE, but is wholly dependent on, established by, and/or "acting" like a GSE.
Examples of gray areas:
Informatix (FIDM) - chosen by the state, so technically a 4th party to a Govt., but we have to share NPI with directly ...
Choose a locality or state and add " Economic/Certified Development Corp"
When it gets tricky, we generally keep them in TPRM inventory and collect as much DD as possible.
Corporate Contract & Procurement Director
FMC CONFIDENTIALITY NOTICE:
This e-mail and any attachments are confidential. In the event that you have received this e-mail in error,please notify us immediately by returning it to the sender and then deleting all copies from your system.
Original Message:Sent: 07-19-2023 05:42 PMFrom: Mark EwertSubject: Due Diligence of Governmental agencies
Typically Government entities are carved out of our program as well, however recently I have wondered if we are overlooking areas of concern.
For example, if we carve out FHA/HUD, how would you assess the web portals for Catalyst, Connection, and EAD to ensure appropriate protocols are in place for users to interact/access with those cites?