The goal is to synchronize your annual cyber strategy / plan with your current vendors to make everyone successful in accomplishing your mission. Many vendors’ objective is to make as much money off of the customer they can with minimum engagement. Some act like partners that are focused on delivering value and making the customer successful, seeking a long-term relationship (while also making money) You need to train your important vendors to provide you actionable metrics that help you with both risk management and ROI estimates.
Source: https://www.helpnetsecurity.com/2021/02/03/vendor-management-spring-cleaning-strategy/