We got a class assignment to build a third party risk assessment framework for a SaaS startup where do I even start with vendor questionnaires