Any comprehensive approach to cybersecurity must include a detailed third-party risk assessment, covering an assessment of how partners view governance, risk, and compliance within their own organizations.
https://www.securitymagazine.com/articles/97793-do-software-vendors-care-as-much-about-security-as-you-do
