How is vendor risk calculated?

Vendor risk = Impact × Likelihood. 

• The vendor’s Impact on the client’s operations is determined via the Impact assessment, which is scored based on a weighted four-question questionnaire. 
• The Likelihood of a security incident occurring is derived from the Security Assessment.