Small and midsized banks fail to implement key oversight measures on their third-party vendors, something regulators implore they fix, according to research released Tuesday.