Make your security expectations very clear from the get-go and make sure that you understand and audit the level of access vendors have.
Tip: