There are many reasons to add security protections to your agreements. Establishing the expectations that the vendor will secure your data and infrastructure with a well-defined Security Program is an excellent way to start. Keep in mind, it is not enough for the vendor to simply state that they will cover security. Hold them accountable to the expected standards you identify with a Security Addendum in their main agreement. Feel free to use the sample Security Addendum to start covering this need in your agreements.