Business During A Pandemic: Mitigating The Other (Cyber) Risks Third-party vendors well prepared to guard against this risk will have a clear governance plan and policy, along with a system for educating users about the risks of shadow IT.