Vendor Risk at Scale (Lightweight, Effective)

Note: Define vendor tiers, intake flow, evidence reuse (SIG Lite), continuous monitoring, and remediation timelines.