How does due diligence work?
Risk management: compliance in crisis management

The first type is OSINT (Open Source Intelligence). This involves the collection and analysis of publicly available data (articles, reports, social networks, etc.).

There are three questions to ask yourself to guide your research/monitoring: What do I know? How do I compile my information assets? What don't I know? Deduce the informational liabilities (What am I looking for/watching for?) and investigate to find the missing information.

OSINT sources include partners (subcontractors, suppliers, customers, competitors, trade associations, etc.), information providers (press, bookstores, libraries, data banks, information centers, etc.) and institutions...