In just about every job I've done, at some time I've been responsible for the assessment and assurance of third parties / suppliers / (data) processors. I often feel that as an information security and data protection community we do a great job when it comes to this as a compliance activity