supplier vetting checklist