Hay, that new vendor from Houston is here. I think he's stealing our signs

Vendor Risk Assessment Best Practice #2 – Assess Early

Vendor risk evaluation is an expensive afterthought. 73% of organizations have no direct communication channel between the security program and management responsible for contracts and procurement. Security, whether intentional or not, is effectively an afterthought. This results in a huge business process gap — and a fundamental mistake — that is very common.