Vendor risk is rapidly becoming the biggest cybersecurity threat facing enterprises.