You can write whatever you want. Nobody is ever looking at that document again. By the time the annual process rolls around the process has already changed so m

You can write whatever you want. Nobody is ever looking at that document again. By the time the annual process rolls around the process has already changed so much that it's now insufficient. The mandate from management will be to "do it right for future vendors, but blanket approve the previously signed agreements" It's the same thing every time because the actual security is in the details, but details are so fucking boring.