The following sections outline the requirements for obtaining coverage over third-parties which impact controls within the scope of the assessment.