Hello, several questions here...
How are you assessing risk at a SOW level? Beginning very simply, how can my organization roll this out to assess all of our SOWs? Is there a simple template anyone can share please?
Also, how are you tracking the overall risk of your vendors and flagging or ID'ing if they are on an improvement plan? Is there a template for this? Where are you housing the data? And how are you alerting the business owners to any changes of their vendors?