Is there any interagency guidance on Vendor Management and policies? I seem to recall there is but cannot find them anywhere?

Interagency Guidelines Establishing Standards for Safeguarding Customer Information

It should be part of the development and implementation of
your Information Security Program. Oversee Service Provider Arrangements.