- Can you tell me why do we do vendor risk management & what's the purpose of vendor risk management ? - What is risk according to you ? - I will give you a 3 examples, can you rate its risk, and what level of risk they are ? 1. Incident 2. PCB simulation 3. Laptop loss - I will give you one vendor, let men know what the data you will assessment, EX: vendor payroll a company is providing a service to our organization as pay roll vendor, i ask you to do vendor assessment to that payroll vendor, what will you perform the risk assessment on them ? - What kind of internal audits/Internal trainings you have given ? - Physical security compliance control what will you do in that security controls/compliance ?