After viewing the Vendor Management webinar last week. I think we need to update our policy. Can anyone direct me to a resource for a sample policy? Or, do you have a policy you would share?

It's not a policy, but the FDIC recently issued comprehensive guidance on vendor management programs that you may find helpful(FIL-44-2008 -- Guidance for Managing Third-Party Risk).

http://www.fdic.gov/news/news/financial/2008/fil08044a.html

Thanks for that info.