How many capabilities address Opaque Third-Party Risk Inputs?

GQ-0038