An IT Security Audit turns vendor security from promises into evidence, and that shift matters even more when organizations must align supplier oversight with NIS2.