What is the primary purpose of using questionnaires in third-party risk assessment and management?
To legally bind the third-party vendors to a contract
To conduct penetration testing on the vendor's systems
To systematically collect security-related information from third-party vendors
To evaluate the financial stability of the third-party vendors