New page for best practices when working with vendors

Why is this change being made?

Creating a vendor hardening guide that will serve as an internal reference when navigating new relationships and to share with onboarded vendors that have identified risks in order to reduce risk.

Does this MR meet the acceptance criteria?

Assign to DRI

• Did you assign this change to the correct DRI of the page or information you are changing?

Conformity

• Added description to this MR explaining the reasons for the proposed change, per say-why-not-just-what