One of the key controls identified during a risk assessment workshop on third-party management is that vendors are required to purchase insurance policies to ca...