b"When it comes to managing third-party service providers, regulatory guidance hasn't evolved - but the technology landscape has."