It is important that the program reflects and enforces an organization’s internal controls framework and policies, ensures compliance with government or industry regulations, and achieves consistency across vendors.