References
- ITO Security Services. (2011). Security Compliance Assessment Checklist. Retrieved from http://www.employeeservices.gov.sk.ca/projectsecurity
- Manzoor, K. (2006). Vendor Security Risk Assessment. Retrieved from http://citebm.business.illinois.edu/TWC%20Class/Project_reports_Spring2006/Business%20Risk%20Management/Manzoor/project%20report.pdf
- NIST IR-7622 (NIST 800-161) for vendor risk assessment/vendor risk management.
- Vendor Management Using COBIT 5. Retrieved from www.isaca.org
- Suggested Reading
- http://citebm.business.illinois.edu/TWC%20Class/Project_reports_Spring2006/Business%20Risk%20Management/Manzoor/project%20report.pdf http://www.employeeservices.gov.sk.ca/projectsecurity
- http://www.protiviti.com/en-US/Documents/Surveys/2015-VendorRiskManagement-Benchmark-Study.pdf
- http://corporatecomplianceinsights.com/do-you-know-what-your-third-parties-are-up-to/
- http://www.radicalcompliance.com/2016/08/04/third-party-risks-in-decentralized-organizations/