board portal vendor security assessment