An important part of establishing strong security for an organization rests with how it interacts with its vendors.