Vendor Management

I am looking for some assistance with vendor management.  What do you do (other than stop using the Vendor) if the Vendor refuses to give there required due diligence documents? 

Also, what is the difference in the required documentation requested between high and medium vendors?

Thank you in advance for any input.

Dorothy Root

VP Risk Management/NCCO, BSACS