A risk assessment exchange is a library of vendor risk assessments that may include supporting documentation and artifacts. TPRM assessment exchanges provide data in a centralized location. The data presented in assessment exchanges is owned by the vendor, and the vendor has full control of the data. Some exchanges also offer real time risk reporting services.
