An organization is concerned about the security posture of vendors with access to its facilities and systems. The organization wants to implement a vendor revie...