Expert Insights: vendor risk