A team involved in overseeing third-party risk management. Findings should be directly reported to them.