If You Engage Vendors, You Need a Vendor Security Policy   In every industry, the risks inherent to doing business must be assessed and mitigated.   The purpose of a…