Security scorecard: vendor risk management tools and why investment managers should take note November 1, 2022