Browsing: managing third-party risk