The organization has no recourse when the external provider does not provide sufficient assurance that they meet the acceptable risk criteria of the organization The organization has no recourse when the external provider does not provide sufficient assurance that they meet the acceptable risk criteria of the organization True False