Building trust in the digital age

How can you build trust in the digital age? What should you ask for to gain confidence that a vendor’s security controls are adequate? How do security policies help build those controls?