CISO: Be realistic about who chooses who you do business with. Create a questionnaire and then build and run the process around it. Hook the process into the way your organization buys. Be realistic and build and build the process to ensure your supply chain is secure. Use this guide on assessing third-party risk and learn how to do it in a secure way of doing business with your organization’s supply chain. For more information, visit the CISO blog: http://www.cmsO.com/security-assessment-guidelines.com.”]