Tag third-party risks