How do I know whether a vendor is creating a security risk for my business?

Review what systems and data the vendor can access, how that access is protected, what subcontractors are involved, and how access ends when the relationship changes. Require appropriate security commitments and verify higher-risk vendors more closely.