2: Ensuring Vendor Security