Focus on vendors who ask hard questions, price for value, embed security by default, and communicate transparently. Check ...