Obtain the vendor's assessment of potential weaknesses of their delivery services as well as the controls they recommend and evaluate any mitigation services they provide.  (The vendor's analysis is only one part of the bank's own analysis.)