第三方风险：在授予访问或数据前评估供应商

20-question supplier assessment in 5 areas: access, data, controls, continuity and contracts/LGPD. Score, gaps and contract actions.