vendor-risk The questionnaire that proves nothing but takes three weeks How an industry of 200-question forms created an illusion of control, and what to do instead if you actually want to know whether your vendor is any good.
