The examiners expect to see multiple risk assessments on one vendor. This means you may need to prepare multiple risk assessments for one vendor that includes information on your vendor's products or services, not just on the vendor themselves.
Risk rating each product is not only a good business practice, it’s a prudent risk mitigation step. Take the extra time to do the required digging and it will pay off - download the infographic now where we'll introduce you to the process.
