IDG Contributor Network: Third-party risk management — not just papering the file