Exposure and contract matrix
Identify the contracting entity, customer type, federal funding or procurement nexus, equipment and services, subcontractors, affiliates, data flows, and questionnaire language. Record the actual provision and version behind each request, separating law from a customer’s internal standard.