During the third-party risk assessment process, it is sufficient to only conduct a preliminary due diligence review at the start of a contractual relationship with a vendor, and no further assessments are needed if the initial findings are satisfactory.
False
True