Avoiding Vendor Consolidation: A Strategic Approach to Cyber Security