TORONTO—I had the good fortune today to attend the Thomson Reuters Financial Risk Summit, where Thomson had asked me to speak on a panel about third-party risk management. This is one of my favorite compliance subjects, and I planned to begin with one of my favorite points about it: that many companies still struggle simply to define and count all the third parties they have.



