Yeah, that would be part of due diligence, however to manage operational risk - I read a point somewhere that says ensuring the planning is done for VENDORS as well.I agree with most, not sure about MVAR and BCM planning. I think I put they had to look at all external audits of the vendor