Updating Vendor guidelines and processes to mitigate risk