The list of companies tripped up over misconduct committed by their third parties is long. In fact, try recalling a big anti-corruption scandal that did not involve a company’s third parties.

Compliance officers straddle the horns of that dilemma: in today’s complex business environment, almost every company depends on outside vendors and other third parties to some extent. But for all the efficiency gains that tactic might bring to operations, good luck taming the growing risk exposure that comes along with it.