Vendor risk assessment matrix creation prompt