Abstract: There is disclosed a method and apparatus for assessing risk associated with a vendor. The method includes receiving vendor information from a vendor, the vendor information including uniquely identifying data, acquiring a first data set associated with the vendor from a third party and acquiring a second data set including a history of transactions with the vendor. The method further includes aggregating the vendor information, the first data set and the second data set into a vendor collective data set and identifying a risk factor using the vendor collective data set.