strategic vendor risk management and resilience