Align Internal Cybersecurity Practices with External Third-Party Risk Management