The comprehensive appraisal of a potential vendor's business to evaluate its commercial, legal, technical, and compliance aspects, particularly from a security and risk management perspective.