Managing risks arising out of third party service providers is a critical part of enterprise risk management. Here’s how you should go about it.