control testing , Information Security, technology risk and controls, Vendor Risk Management, third-party risk requirements, issue closure, evidence management, governance reporting, assurance remediation tracking, operational resilience, Audit, cloud governance, vendor governance activities, risk assessments, technology risk regulatory expectations, control improvement