Tagged third-party-risk