Vendor risk mitigation

shape