Knowledge Network · Sep 17, 2026
Why Traditional Due Diligence Questionnaires Are Failing
One of the strongest parts of the conversation was Mike’s blunt take on old due diligence habits. He was clear that the classic “send a questionnaire, wait for a reply, file it away” model is not enough anymore. In fact,...
- A workflow with defined intake steps
- Documentation of screening and review
- Beneficial ownership verification
- Evidence of escalation when something looks off
- A searchable file that shows what was done, when, and by whom
That is a completely different posture from “we sent a form and they filled it out.” And when something goes wrong, that difference becomes everything. If a third party becomes the subject of a government investigation, your organization needs to be able to show exactly how it approved the relationship and what diligence was performed. That means the audit trail matters as much as the decision. See the full podcast: https://www.buzzsprout.com/2120821/episodes/19654946
From Third Party Threat Hunting™ (TPTH™)
Put it to work
Ready for the exam?
The free exam and audit readiness scorecard: eight questions to ask yourself before an examiner or auditor does.
Get the scorecard →Have us run it
Managed third-party threat hunting: practitioners on your systemically critical vendors, automation on the rest.
See the managed tiers →