https://www.servicenow.com/community/grc-blog/varanawesomenow-my-vendor-risk-management-journey-part5/ba-p/2333055