Problem Statement
Which process is used to assess third-party vendor risk in compliance frameworks?
Explanation
Assessing third-party vendor risk is critical because organisations often rely on external suppliers that can introduce vulnerabilities. A structured vendor risk assessment examines vendor’s security posture, compliance certifications, contract terms, history of incidents, and controls.
Interviewers expect candidates to know that vendor risk cannot be ignored just because the vendor is external; it must be managed, monitored and included in the organisation’s risk-treatment process. :contentReference[oaicite:3]{index=3}
