"The more vendors you work with, the greater the chance you'll be impacted by a cybersecurity incident affecting one of them.... [E]very vendor you work with likely works with other vendors, increasing the probability that you'll be affected by an incident.... If a vendor cannot provide an objective, third-party cybersecurity assessment, like a SOC2 report or other attestation, showing that it has solid cyber protections in place, that's a red flag."  MORE >>