How to properly assess the risk management profile of your IT Vendor

Is your outsourced vendor protecting the confidentiality, integrity, and availability of data and access in the same way you would?