I agree. Defense-in-depth in terms of risk management. Use many strategies, in depth and breadth, holistically to manage vendors. There is no single magic actio

I agree. Defense-in-depth in terms of risk management. Use many strategies, in depth and breadth, holistically to manage vendors. There is no single magic action to make vendors do good work and be competent. It's lots of annoying managerial effort, but hopefully it's prevention and effort applied effectively. I think just showing up, having a look around, treating vendors as human, and being curious without annoying curious about what's going on goes a ways to show there's humans and not just nameless a corporation behind a project.