Third-Party Audit
What is Third-Party Audit?
An independent audit conducted by an external organization to verify compliance with standards, regulations, or contractual requirements.
Terms that appear alongside third-party audit
Each of these is named in at least one of the same controls as third-party audit. The number is how many controls name both.
- audit 5 shared controls
- compliance 3 shared controls
- certification 3 shared controls
- vulnerability 2 shared controls
- iec 27001 2 shared controls
- soc 2 2 shared controls
- gdpr 2 shared controls
- confidentiality 2 shared controls
Frameworks that govern third-party audit
What the standards actually require on third-party audit
Requirements naming third-party audit across 6 standards, quoted from the control text.
Parallel to 68.59 for Program 3: when a 68.79(f) trigger applies the owner or operator must engage a third-party auditor, or a team led by one, meeting the competency criteria (knowledge of Part 68, experience with the source type, processes and RAGAGEP, audit...
epa-risk-management-program-40-cfr-part-68::68.80 · § 68.80 Third-party audits →Management develops, implements and monitors a process to measure IT compliance with the board-approved policies, supplementing internal and third-party audit with periodic self-assessments whose scope and frequency depend on the scale and track record of the...
ffiec-it-examination-handbook::MGT-III.D.4 · III.D.4 Policy Compliance (Management) →Senior management must hold management review meetings at planned intervals (at least annually) that assess how the site performs against the Standard and its objectives. The review evaluates previous action plans;
brcgs-global-standard-for-food-safety-issue-9::1.1.4 · 1.1.4 Management review at least annually covering the defined inputs, with actions recorded and communicated →The organisation states whether it checks that it and its suppliers comply with mandatory standards and forest regulations in producing and sourcing countries, the aspects of legislation considered (land use rights, environmental protection, rules on forests,...
cdp-formerly-carbon-disclosure-project::8.14 · Question 8.14: Forests: legal compliance →Contracts must be in writing and include all elements of DORA Article 30(2) and (3), plus elements on Article 1(1)(a) and other relevant law.
dora-rts-on-ict-third-party-contractual-policy-commission-delegated-regulation-eu-2024-1773::8.1 · Article 8(1) and (2): Written contracts with DORA clauses and audit and testing rights →Providers are chosen and assessed against the criteria in the outsourcing policy. Due diligence precedes outsourcing and, for a further agreement with an already assessed provider, is repeated only if a risk based view says so, and promptly redone after signif...
eiopa-guidelines-on-outsourcing-to-cloud-service-providers-eiopa-bos-20-002::9 · Guideline 9: Due diligence on cloud service provider →Questions people ask about third-party audit
What is Third-Party Audit?
Why is Third-Party Audit important for compliance?
Which compliance frameworks address Third-Party Audit?
Where can I learn more about Third-Party Audit?
See how Third-Party Audit applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.