This document discusses vendor certification and categorization. It defines vendor certification as ensuring a vendor will meet regulatory expectations. Vendors are categorized from 1 to 4 based on risk, with category 1 being experts with minimal monitoring and category 4 being sole-source API manufacturers requiring intense monitoring. The document also outlines the vendor qualification process, including selection criteria, evaluation of production processes, and standard procedures for quality audits.