Tag third party risk management