Improving third party risk management programs to optimize operations