Given the complexity of financial information and the wide range of vendors involved, what elements should be prioritized in developing a vendor monitoring program in a financial institution? What would you focus on first and how would you define a successful program