TMS vendor security assessment