Your vendors’ weaknesses are yours. That systems integrator still keeping secrets next to your vpn instructions in client-passwords.xlsx is your risk. The new flashy AI manufacturing partner cutting corners to ship and onboard your company onto their platform, dropping their systems in your facility with “military grade security” but a backdoor with admin/admin is your risk.
Their gaps, shortcuts, and weak processes become the standard in your environment and your contracts whether you want them to be or not.
Ignoring it or pretending it’s not happening is risk acceptance, not risk avoidance.