Observations involving acquisitions, parent companies, subsidiaries, ownership changes, and their effect on risk or scope.
Vendor Activity
+3
Nov 4, 2026
•
2 min read
Not every unanswered assessment question belongs to the vendor. Sometimes the customer is the authoritative source for whether a third-party relationship actually exists.
Questionnaire
Oct 7, 2026
A question may not fit the vendor’s environment, but that does not always mean the underlying control responsibility disappears.
Assessment History
Sep 23, 2026
An acquisition may change who owns the company without changing what the previous assessment actually covered.
Assessment Judgement
+2
Sep 2, 2026
A different company name can be a clue, but the assessment still has to establish which entity owns the service and control environment.