I need to figure out how to do a third party risk assessment for our vendors since our compliance team just asked me to handle it with zero prior experience.