Establish and enforce a consistent governance process for major and/or high-risk IT hardware, software, and services suppliers.
Must-have
Nice-to-have
Not specified