high risk vendors