The best way to mitigate this risk is to make sure there are standards and a viable vendor poole. There will always be higher risk associated with a single vendor.