Enterprise systems must be managed to ensure that vendor compromise does not become organizational compromise.