1. Industry-Specific Requirements: Additional requirements specific to certain industries (e.g., financial services, healthcare)

2. International Compliance: For third parties operating internationally or subject to foreign regulations

3. Environmental Risk Assessment: Environmental impact assessment for third parties in industries with environmental concerns

4. Social Responsibility Assessment: Evaluation of corporate social responsibility and ethical business practices

5. Technology Infrastructure Assessment: Detailed IT systems and infrastructure evaluation for technology-dependent services

6. Supply Chain Assessment: Extended assessment of the third party's own supplier network and dependencies

1. Schedule A: Risk Assessment Matrix: Detailed risk scoring criteria and evaluation matrix

2. Schedule B: Due Diligence Checklist: Comprehensive checklist of required documentation and verifications

3. Schedule C: Compliance Certification Forms: Templates for compliance certifications and declarations

4. Schedule D: Security Assessment Questionnaire: Detailed questionnaire for assessing security controls and measures

5. Schedule E: Performance Metrics: Key performance indicators and measurement criteria

6. Appendix 1: Document Requirements: List of required documents and certificates from the third party

7. Appendix 2: Incident Response Protocol: Procedures for handling and reporting risk incidents

8. Appendix 3: Contact Information: Key contacts and escalation matrix for both parties