Maybe! Many organizations are now requiring that their key vendors, suppliers, partners or primary clients conduct risk assessments. Reasoning: information shared between 3rd parties introduces cyber risks. Knowing that your key vendors, suppliers, partners or primary clients are assessing their risks makes your information supply chain more secure. Additionally, cyber liability insurance providers often require proof of a cyber security risk assessment in order to issue a policy. Furthermore, if your organization requires information security compliance with HIPPA, SEC rules, CMMC or related regulations or frameworks, then a risk assessment is often a large piece of compliance.