At a recent BitSight Roadshow, a customer with an advanced third party risk management program declared “assessments are not risk reduction.” The statement was not meant to convey that assessments are useless for third party risk; rather, that assessments themselves don’t inherently drive risk down.
Article Link: https://www.bitsighttech.com/blog/how-bitsight-helps-drive-quick-risk-reduction-across-third-party-ecosystems