The risk based program evaluates many facets including but not limited to the vendor’s operational risk, financial risk, security policies, control environment, and overall stability to ensure alignment with the our internal practices.