My boss just handed me a vendor security questionnaire and I have no idea how we are supposed to be conducting third-party risk assessments effectively starting this afternoon.