http://www.inforisktoday.com/blogs/vendor-security-alliance-formed-to-improve-cybersecurity-third-party-p-2280