Due Diligence and Ongoing Monitoring

Hi Everyone.  We are discussing implementing a risk rubric for evaluating new vendors.  This would use a weighted score on categories such as:
Vendor Financial Risk
Vendor Operational Risk
Vendor Compliance & Regulatory Risk
Vendor Data Security Risk
Vendor Reputational Risk

What other categories are you all using to do something like this?  Is anyone willing to share their template?

Thanks so much!