vendor oversight