What types of risks or vulnerabilities could be transferred from a supplier and/or imposed upon a purchaser of cyber security related products and/or services?

Industry Profile Part 1: Acquisition & Procurement Risk in the Cyber security Industry

For this paper, you will investigate and then summarize key aspects of risk and risk management for acquisitions or procurement of cyber security products and services. The specific questions that your industry profile will address are:
1.What types of risks or vulnerabilities could be transferred from a supplier and/or imposed upon a purchaser of cyber security related products and/or services?
2.Are suppliers liable for harm or loss incurred by purchasers of cyber security products and services? (That is, does the risk transfer from seller to buyer?)
3.How can governance frameworks be used by both suppliers and purchasers of cyber security related products and services to mitigate risks?