The licensee exercises appropriate due diligence in selecting its service providers; and requires its service providers to implement appropriate measures designed to meet the objectives of this subchapter, and, where indicated by the licensee's risk assessment, takes appropriate steps to confirm that its service providers have satisfied these obligations.
N.J. Admin. Code § 11:1-44.8