germano-nyu-thirdpartyriskwhitepaper-feb2017