Procurement and vendor management policy