The relationship between CISOs and vendors is fraught with problems that result in a deeply flawed procurement process - by ... the gatekeepers of security and risk management.