https://www.servicenow.com/community/grc-blog/varanawesomenow-my-vendor-risk-management-journey/ba-p/2333057