When it comes to a vendor risk assessment summary report, every organization is slightly different. However, there are some fundamentals that these reports should always include. Please pay attention to numbers 10-11, as Subject Matter Expert reviews should always be completed before contracts are executed.
The risk area(s) being evaluated.
Those are really the basics; your organization can expand on these or change them. But this list provides a great starting point for those new to vendor risk assessments. I would love to hear thoughts from other members too.