Yes, we have been audited by external vendors in ITAM. While I wasn’t directly involved, some have gone well (in compliance), we have a small true-up to do, and one didn’t go well. The analyst who had initially worked on negotiations was using an email instead of the contract, and that did not fly with the vendor. We had to pay a significant amount in that instance.
