As enterprise organizations incorporate more Software as a Service (SaaS), security leaders need to vet potential third-party vendors to assess their cyber risk.
https://www.securitymagazine.com/articles/97211-5-questions-to-consider-before-adopting-new-software