Third-party risk management governance documents will generally include three components – a policy, program, and procedures. The program document answers the "how" of each third-party risk management activity. In this infographic, learn important considerations and strategies to follow to help you write a program document.