The second phase in the third-party risk management process is the questionnaire. The term “questionnaire” is mentioned several times in the 2012 FCPA Guidance. It is generally recognized as one of the tools that a company should complete in its investigation to better understand with whom it is doing business. The questionnaire should be a mandatory step for any third party, and if a third party does not want to fill out the questionnaire or will not fill it out completely, you should not walk, but run away from doing business with such a party. 

Thomas Fox has practiced law for over 40 years. Tom writes the daily award-winning blog, the FCPA Compliance and Ethics blog and founded the Compliance Podcast Network. Tom leads the discussion on AI in...