Why vendors can increase your company’s cybersecurity risk profile