What is a supplier risk assessment?

A supplier risk assessment evaluates a third-party vendor's security posture and potential risk to your organization. It typically covers cybersecurity policies and controls, access to your systems and data, financial stability, regulatory compliance status, geographic concentration, and incident history. Assessment depth should be proportional to the supplier's access and criticality to your operations.