Vendor Management
VM-03Complete tier-appropriate due diligence before engaging
How Leela would run itEvent-driven · each new vendor, before contract execution
From the policy libraryThe requirement
Before any engagement, diligence scaled to the tier is completed and documented: a signed diligence memo with findings, gaps, and mitigations for critical providers; an approved diligence summary for material vendors; a brief approval memo or retained correspondence for standard vendors.
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
The work
Collect the items the tier requires, assess each category, decide under the risk framework, and have the Compliance Officer sign the memo or approve the summary.
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01Diligence memo or summaryFindings by category, gaps, mitigations, decision, sign-off
- 02Supporting materialsFinancials, attestations, insurance certificates, references
Evidence
Diligence memo or summary
Vendor Management §5.2, §13
2
of 2 records
The work and the records come from this obligation in the policy library.