Many of us are struggling to extend security responsibility and accountability to third-party vendors and outsourcing companies.