How to Conduct a Vendor Risk Assessment [5 Step Checklist]

## Executive Summary This document provides a concise vendor risk assessment and audit guide, describing why organizations must evaluate third-party risks, when to perform assessments, and a five-step approach that includes identifying vendor risks, creating an assessment framework, and managing the vendor lifecycle with specific qualitative and quantitative documentation, controls, and governance to maintain ongoing vendor security and compliance.