Vendor risk speed-check
Create a 15-item diligence list: uptime SLA, breach history, escrow, change-of-control clause, data residency, support coverage, and termination steps. Ask vendors for evidence links, not PDFs. Log everything in one sheet. If a red flag appears, define compensating controls immediately. Share a one-paragraph risk summary with the executive sponsor.