Third-party risk: assess a supplier before giving access or data

20-question supplier assessment in 5 areas: access, data, controls, continuity and contracts/LGPD. Score, gaps and contract actions.