Its never that simple. But sometimes you just need to make sure you have control over 3rd party supplier security.