The statement states that "The vendor management and outsourcing framework is applied to all new vendors. This framework includes a requirement that any new vendors that are deemed to be an outsourcing supplier or a high-risk vendor confirm in writing that they comply with the Act." (page 1, last paragraph, to page 2, paragraph 1)