Why vendor management must be a cornerstone of cybersecurity