In the context of CERS certification, what is the most important consideration when implementing vendor management & rpo?