A word to the wise - if you allow third party access to your business network, whether vendors, service providers or contractors, you had better revisit the security protocols you employ in the network or you will likely end up like Wendy's, the latest major retailer to be hacked via malware introduced through such third party access and credentials. Here are several steps you should take immediately to reduce the risk and demonstrate diligence with others’ personal information:

1. If you must provide third parties access to your network, insist upon strong, unique, hard-to-crack passwords for each login and several levels of authentication to reduce the chances your network will be compromised.
2. Even if you trust a third-party, limit what they can do on your network – limit access to the absolute minimum they require to do their job.
3. Have software applications and human review systems in place to monitor network access, the data accessed, and a reporting escalation process for suspicious or unusual activity so it can be promptly investigated.
4. Require third-party vendors, service suppliers and contractors to meet minimum security procedures. If they do not meet your baseline standards, don’t give them access to your network.
5. In your terms of purchase or service with the third parties, require them to indemnify you from any loss or damage resulting from their access to your network.