Why is it important to track vendor relationships and behaviors?

To establish and communicate security policies and standards

To report on audit results in a consistent and timely manner

To better scope and document your information security management system

To understand the extent of an organizations dependency on third parties and how third party risks affect the organization