So we're having a hell of a time getting prospective and grandfathered in vendors to sign our Vendor Control Policy as part of our vendor approval process.
Is there something wrong with this approach? Our policy is about 6 pages long, and the most important parts of the policy that vendors absolutely have to read are earmarked. Do any of you do anything similar? My boss and I have gotten some push back internally that our approach is too complicated. But, we think it's well within reasonable limits for due diligence.