[3-1] Maintain an approved vendor list.