Surveillance watchdog inspects GCHQ IT vendors’ security risks