Which of the following is MOST important to include when identifying risk scenarios for inclusion in a risk review of a third-party service provider?
A . Open vendor issues.
B . Purchasing agreements.
C . Supplier questionnaires.
D . Process mapping.
Answer: D