Nobody reads the supplier questionnaire

A blunt conversation about third-party risk paperwork: what it actually tells you, what it never will, and the three questions worth asking instead.