https://www.servicenow.com/community/grc-blog/now-on-now-taming-the-supply-chain-addressing-vendor-risks-to/ba-p/2274591