Vendor/third-party risk assessments

[datherton09]

Expand the search for vendor/third-party risk assessments.

[datherton09]

https://www.onetrust.com/blog/third-party-ai-risk-a-holistic-approach-to-vendor-assessment/ (don't add to repo; marked out as example)