I need a simple step-by-step checklist for auditing third-party vendors to help with mitigating supply chain software risks since I have no formal training in compliance.