ARCHIVE FOR vendor risk management