Appendix I: Additional Requirements for Third Parties/Vendors