How would you assess the security posture of a new vendor before onboarding them for Western Governors University?