Abstract: A method of conducting a due diligence procedure of a contemplated, continuing or follow-up business transaction between first and second parties generally consisting of devising a list of inquiries, assigning values to such inquiries, establishing levels of risk exposure due to each response to such inquiries, eliciting responses to such inquiries and the assignment of a level of risk exposure to each of such responses, and evaluating the relevant risk exposure in proceeding with such transaction by a consideration of the values assigned to such inquiries and the assigned levels of risk exposure to responses to such inquires.

Abstract: A management system for determining the security measures of a plurality of vendors. An assessment is performed on a plurality of vendors at a discount. The assessment is placed into a database and is reviewable and accessible by clients who subscribe to the management system. The management system allows clients to review and assess the security information regarding a plurality of vendors without the cost of performing an assessment of each vendor.