Policy, Program and Procedures

In addition to the standard questions considered regarding criticality (operational disruption, customer impact, etc.), my organization will also consider a vendor critical if the initial or annual investment is above a certain dollar threshold. Is anyone else employing this methodology, or does anyone see a downside to this consideration?

Thank you for weighing in.

I'm not sure if this will answer your question. Basically, we determine the criticality based on several factors which includes annual cost. Based on how those questions are answered, it will give us a score and criticality level (ie: high, med, low) rating.