Critical Vendors

• Are they critical to your organization continued viability?
• Do they capture, house, process, store or dispose of member or organization s confidential information?
• Are there regulatory requirements?
• What is our dependence on the vendor?
• Would they be difficult to replace?

Contract Owner Responsibilities

• Critical Vendor Reviews
• Performance and SLA
• Financial Status
• Internal Controls (SAS 70 or other objective review)
• Request from Vendor Annually: SAS 70, Financials, independent reports, regulatory reviews.
• Document Your Review