We are currently using an Access database for our vendor management function. However, we have no rating system for our vendors to determine which ones are criticl vendors and shich ones are now. Currently, that is determined by our CEO. I am looking to build some sort of rating system in our database for a better determination of which vendors are critical. Can anyone offer advice as to which criteria I should be looking at?

Risks pertaining to the function outsourced include:
• Sensitivity of data accessed, protected, or controlled by the service provider
• Volume of transactions
• Criticality to the Bank’s business
Risks pertaining to the service provider include:
• Strength of financial condition
• Turnover of management and employees
• Ability to maintain business continuity
• Ability to provide accurate, relevant, and timely management information systems
• Experience with the function outsourced
• Reliance on subcontractors
• Location, particularly if outside the United States
• Redundancy and reliability of communication lines
Risks pertaining to the technology used include:
• Reliability
• Security
• Scalability to accommodate growth

You also want to look at how easily they can be replaced - replacing a flood vendor, for example would be far easier than replacing your core processor.

Check this web site out: http://www.bankervms.com/