The financial services industry's approach to third-party risk management is changing in response to an increasingly complex environment.