More than 5 billion records were exposed in 2018 alone and third parties were often found to be at fault. With a proper third-party risk management strategy in place you can drastically reduce the chance of a breach happening in the first place and limit the impact on your business if it does. It doesnt matter if a third party is to blame if your company is responsible for the data, then you will be held accountable. Its an expectation not an option in the event of a data breach.”]
Source: https://www.csoonline.com/article/3434604/are-you-taking-third-party-risk-seriously-enough.html