Study: Monitoring Vendor Risk Remains Much Harder Than Onboarding Third Parties Healthcare organizations are getting better vetting third-party vendors, including suppliers of medical devices, software and other products. But once these vendors are on board, healthcare firms still struggle with monitoring their security posture and ensuring they keep their promises.