What are the regulatory requirements for third-party risk assessments in the financial or healthcare sectors following recent high-profile supply chain breaches?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What are the regulatory requirements for third-party risk assessments in the financial or healthcare sectors following recent high-profile supply chain breaches?
5 real searches · 1 real-search pass
2026 third party risk management regulatory requirements financial services healthcare HIPAA HHS OCR FTC GLBA interagency guidance DORA NIS2Google ↗
OBSERVED
site:occ.treas.gov third-party relationships risk management guidance 2023 banks due diligence ongoing monitoringGoogle ↗
OBSERVED
site:federalreserve.gov SR 23-4 third-party risk management guidanceGoogle ↗
OBSERVED
site:hhs.gov HIPAA business associate risk analysis security rule third party breach notificationGoogle ↗
OBSERVED
site:ftc.gov Safeguards Rule service providers financial institutions risk assessmentGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 5 queries…
Searches and sources
ChatGPT5 real searches · gpt-6
2026 third party risk management regulatory requirements financial services healthcare HIPAA HHS OCR FTC GLBA interagency guidance DORA NIS2 Google ↗
site:occ.treas.gov third-party relationships risk management guidance 2023 banks due diligence ongoing monitoring Google ↗
site:federalreserve.gov SR 23-4 third-party risk management guidance Google ↗
site:hhs.gov HIPAA business associate risk analysis security rule third party breach notification Google ↗
site:ftc.gov Safeguards Rule service providers financial institutions risk assessment Google ↗
- Agencies Issue Final Guidance on Third-Party Risk Management · occ.treas.gov
- The Fed - SR 23-4: Interagency Guidance on Third-Party Relationships: Risk Management · federalreserve.gov
- SR 23-4 attachment: Interagency Guidance on Third-Party Relationships: Risk Management · federalreserve.gov
- FTC Safeguards Rule: What Your Business Needs to Know · ftc.gov
- Third-Party Risk Management: Proposed Guidance and Request for Comment · occ.treas.gov
- The EBA publishes its final Guidelines on the management of third-party risk, delivering a more proportionate and consistent framework aligned with DORA · eba.europa.eu
- DORA – Regulation (EU) 2022/2554 · eur-lex.europa.eu
- Guidance on Risk Analysis · hhs.gov
- Summary of the HIPAA Security Rule · hhs.gov
- Breach Notification Rule · hhs.gov
- HIPAA Security Rule NPRM · hhs.gov
- HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information · thefederalregister.org
- The Security Rule · hhs.gov
- HHS Cyber Gateway · hhscyber.hhs.gov
- Change Healthcare Cybersecurity Incident Frequently Asked Questions · hhs.gov
- American Hospital Association and Health-ISAC Joint Threat Bulletin - TLP White · aha.org
- Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations · nist.gov
- NIST SP 800-161 Rev. 1 · csrc.nist.gov
Queries
5 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
2026 third party risk management regulatory requirements financial services healthcare HIPAA HHS OCR FTC GLBA interagency guidance DORA NIS2 OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
site:occ.treas.gov third-party relationships risk management guidance 2023 banks due diligence ongoing monitoring OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
site:federalreserve.gov SR 23-4 third-party risk management guidance OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
site:hhs.gov HIPAA business associate risk analysis security rule third party breach notification OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
site:ftc.gov Safeguards Rule service providers financial institutions risk assessment OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 |