Leveraging Security Frameworks for Third-Party Risk Management