Glossary: Business Risk, Third Parties and Compliance

Vendor assessment

Also written: vendor assessments, assessment

A structured, repeated review of one vendor's security and risk, often by questionnaire and evidence. It runs on a schedule set by the vendor's tier, or after a trigger such as a breach.