A Chief Information Security Officer (CISO) is developing a third-party risk management program and wants to establish an order of preference for solicitation a...