Mechanisms exist to mitigate the risks associated with third-party access to the organization's systems and data.