What are the biggest concerns with vendor risk management?

Hey guys, after becoming a cybersec consultant and doing risk assessments for a bunch of companies I've seen such a wide range of issues in third-party risk management. I am trying to educate my blog viewers as well as newcomers at work as this topic is becoming increasing important. I was curious to know some of the most common concerns you guys have seen in regards to vendor risk? I'd love to know your thoughts and experiences, thanks!

assessments blog companies consultant cybersec cybersecurity doing hey important love management party risk risk assessments risk management third third-party third-party risk management vendor vendor risk management work