https://www.servicenow.com/community/grc-blog/varanawesomenow-my-vendor-risk-management-journey-part6/ba-p/2333064