All you need is a list of your suppliers and your annual spend with each one to assess their risk across multiple categories, up to 10 tiers deep. For individual supplier checks, you only need the business name or website.