Update link to third party vendor security review

Why is this change being made?

Updating a broken link to the Third Party Vendor Review process.

Does this MR meet the acceptance criteria?

Conformity

• Added description to this MR explaining the reasons for the proposed change, per say-why-not-just-what