As vendor risk management becomes a more clear and present danger, the challenge for mitigating vendor risk is twofold: