bridge letter

A bridge letter is a letter from a vendor that attests to the continued validity and accuracy of the provided external assessment (no significant changes in their environment or threat landscape) between the report end date and the current date.  UVA requires that a bridge letter may span no more than six months from the report end data and the date of UVA's request for an external assessment report.


Source URL: https://security.virginia.edu/definitions/bridge-letter