Boosting vendor risk reporting accuracy