The process used to formally collect vendor due diligence or other official documentation necessary for third-party risk management.