Providing a software platform featuring a toolkit, namely, a non-downloadable software for information security experts for the purpose of the evaluation and management of information security risks and performing information security assessment and management services for vendors