Annual Recertification

Recertify vendors annually so risk does not silently drift. Learn the recertification scope (lighter than initial DD but covering the moving parts), the refresh of DD elements (security, privacy, financial), attestation refresh, contract review trigger (when do material changes warrant a contract amendment), and the renewal-or-exit decision rolled into the recertification.