What do vendors need to do to document compliance with the requirement?

Embedded vendors should affirm their compliance via the online attestation form and notify their regular university contact.