Vendor Assessment

how do we know which third-party vendors to do business with?

uhhh just do a bunch of stuff on them. lowkey experiment on them.

Penetration Testing Right to Audit Clause Proof of Internal Audits Independent Assessments Supply Chain Analysis

Audits and Assessments

If organizations don't comply with government requirements for internal assessments for things like PCI DSS and others, you probably shouldn't do business with them.

Internal Compliance Assessments Audit Committees
Self-Assessments