“You should not rely on a single thing in order to do risk reduction.”

Transcript evidence from Niels Tanis — 3rd Party Risk in a .NET World.