LensReading which lens this session carries.
All controls

CTL-024 · Third-party risk

Third-party model providers are assessed

Every external model provider the estate depends on carries a current assessment and an exit route.

Untested
This control has never been tested. It is not a pass and it is not shown as one anywhere on this platform. The design exists; the operating evidence does not. Until a test is run against a real sample, treat this control as a gap.
Domain
Third-party risk
Scope
enterprise
Frequency
annual
Operation
Manual
Control owner
Head of Third Party Risk · security
Tester of record
external-audit
Last tested
Next due
Oct 27, 2026 · in 70d

What counts as evidence for this control

Written before the test, so a tester cannot choose the evidence that suits the result

Assessment report and exit plan per provider.

Test history

No test has been performed

Nothing has been sampled against this control. There is no result to report and none is invented.

Exceptions raised against this control

None raised

No exception has been raised against this control.

What this page is, and what it is not

Read this before quoting a result

The test results on this page are a modeled test history for a modeled estate. They demonstrate the shape of independent control testing — a named tester outside the operating team, a stated sample method, a sample size, a pass and fail count, and evidence citations that resolve into the chain — not the audited results of a live enterprise.

0 of 0 evidence citations on this control resolve to a record in the evidence spine. Every citation resolves; each one links through to the sealed record it refers to.

A control shown as untested has no result at all. Coverage on this platform counts controls that were actually tested; it never counts a control as passing because it was designed.