Reviewing the ability to identify critical vendors and services