The IT Vendor Management Standard has been retired. Please see the Information Security set of policy documents. The majority of the IT Vendor Management Standard was intended to ensure proper management of the security practices of vendors. New Information Security program changes have created redundancy in a way that caused unnecessary complexity from this Standard to achieve similar goals. Professional IT service management would cover the remainder of the expectation (planning for compliance with the University's Records Management requirements for example). Please reach out to the ITS Policy Office with any questions.