Annual project to review appropriateness of security certifications or controls of a client’s own vendors. Initial focus is on vendors providing critical services ..