Vendor Management Controls

The same requirements for detecting, preventing and mitigating identity theft for covered accounts in your business also extend to any service provider who is performing an activity involving covered accounts.  what this means to you is ... you are responsible for having appropriate vendor management controls in place to ensure any third party involved in dealing with or handling covered accounts is compliant with relevant provisions of the Identity Theft Red Flags Rule and Regulations.

Don't allow the "one size fit all" Red Flags service providers; oversight of this key element result in unnecessary fines and penalties to your business.