covid-19 vendor due diligence questions