The Next Compliance Problem for CFOs Is Their Vendor’s Vendor List

Twenty-seven nations are likely to come up with 27 different definitions of vendor risk. The European Union’s member nations are finding that out in real time. And while the long-standing debate around whether equipment from suppliers such as Huawei should sit inside critical communications infrastructure is nothing new, there is a more consequential problem for companies far beyond telecom: organizations can know exactly who they are buying from and still have surprisingly little idea whose tec