Compliance is critical
...partys risk posture. Rather than send a 60 page questionnaire, why not evaluate the organizations compliance with its own policies across a cross-section of its information risk landscape. I submit that it would provide a more accurate and useful picture of risk exposure and risk management capabilities than the typical questionnaire, at less...
