How a healthcare company tackles third-party risk