Policies and resources for use when entering into contracts with external vendors for products or services involving confidential or high risk information.