Yes, Picus conducts third party risk assessments on a regular basis and continuosly monitors the third parties which provide critical services to the business. It should be noted that no third party vendors have system administration level privileges to Picus services.