·       What should institutions be looking for when monitoring for internal and external concentration?

·       Institutions should fully understand their end to end supplier network, for key/material processes and services, (both internally and externally) to identify bottlenecks and single points of failure. 

·       If they find one provider is critical to a particular service.