When assessing third-parties vendor, the collection of the data is only the beginning. This presentation will cover what should be done next. The session will cover items such as evidence validation, risk assessments based on inherent risk tiers, and building a successful and repeatable vendor risk program.