Audit my vendors' security pages into a risk table

Audit the security posture of these vendors we use: [list vendors]. For each, find their trust center, security page, status page, and privacy policy. Capture: certifications claimed — SOC 2 Type II, ISO 27001, GDPR and CCPA posture — and whether they link real evidence or just say the words, data residency and subprocessor lists, breach history from news and disclosure databases, uptime track record from their status page, and how to report vulnerabilities to them. Build a risk table: vendor, what data of ours they touch [note what each handles], certifications verified versus merely claimed, red flags, a suggested risk owner on our side, and an evidence link per cell. Rank vendors by risk — data sensitivity crossed with weakness of evidence. Be strict about the difference between claiming SOC 2 and linking an audit report or trust portal; that difference is the whole audit. Flag vendors with no security page at all as findings.