Federal banking agencies are proposing a more tailored approach to third-party risk management. That doesn't make vendor oversight easier. It makes understanding the actual risk of each relationship more important.