That’s a pretty good list.
How about a vendor scoring system based on solid performance metrics? If you decentralize procurement you might keep others from getting burnt.
The problem with that is, how does a new company show past performance? It would result in a closed system.