The Information Technology Asset Manager should maintain the IT Approved Vendor List Template, listing vendors with which it has done business over the last five years, for reference purposes. ITAM103-4 IT VENDOR LIST includes vendor ID, contract number, asset class, and more.
If a vendor is found to be out of compliance, Quality Management should submit a Corrective Action Request, in accordance with the IT Incident Handling procedures. The Information Technology Asset Manager should update the disqualified vendor’s entry in the IT Vendor List. Disqualified vendors should be prohibited from doing business with the company for one year from date of disqualification.