(
)
Information Security Governance and Risk Control
Vendor Risk Assessment (VRA)
Risk & Compliance Governance View