Thank you for your input. 
I will add something on the PO that addresses additional controls..
Something like
Vendors that are not ISO certified will be added as "PROBATIONARY" on our AVL, (Approved Vendor List).
In order to establish "APPROVED" status requirements include:
1. A satisfactory performance evaluation.
2. A signed copy of our Supplier Profile & Purchase Order Terms & Conditions on file.
I wish our database rules were a little more flexible but our software currently does not have the flexibility to add parameters for probationary vendors. However, we are able to add a field for status.

I will add something on the PO that addresses additional controls..
Something like
Vendors that are not ISO certified will be added as "PROBATIONARY" on our AVL, (Approved Vendor List).
In order to establish "APPROVED" status requirements include:
1. A satisfactory performance evaluation.
2. A signed copy of our Supplier Profile & Purchase Order Terms & Conditions on file.
I wish our database rules were a little more flexible but our software currently does not have the flexibility to add parameters for probationary vendors. However, we are able to add a field for status.
We are getting there!
Conditions 1 and 2 are not additional controls in my book.
An additional control helps manage the risk of incomplete assessment. It may for example require the supplier to submit its quality plan for your approval or to send you the results of conformity testing before shipping its product to you.
John
