To asses new service providers they review the risks associated with the service provider's country, sector and industry and the nature of the specific transaction (page 1). It is done monthly by the Firms Risk and Compliance Committee but it does not say how this is reviewed (page 2).