3rd party concentration risk – Below the tip of the iceberg – Part 1