The Third-Party Vendor Risk Management in Healthcare report from the Cloud Security Alliance (CSA) provides an overview of the third-party vendor security risks healthcare organizations face.
https://www.securitymagazine.com/articles/98047-strategies-for-third-party-risk-management-in-healthcare