The risk-based program evaluates many facets, including but not limited to the vendor’s operational risk, financial risk, security policies, control environment, and overall stability to ensure alignment with our internal practices.