That's the ideal state, isn't it? A due diligence that鈥檚 based on how you鈥檙e actually planning to use the vendor and the risks associated with it. Not this risk management theatre that TPRM is.
Does this now allow us to assign enterprise risks without giving broader permissions? My CFO doesn't need admin access, but does need to own our financial risks