The bank should review all third-party audit reports of the vendor that are publicly available.

The bank should ensure that the vendor's sales representatives are compensated mainly with commissions from the sale of the bank's products.

The bank should prevent the third-party vendor from having access to any of its critical processes.

The bank should be responsible for developing the vendor's contingency planning process to mitigate risk exposure to the vendor.