3 ways to shore up third-party risk management programs