Source
Comments
only says "Suppliers we define "at risk" for non-compliance... are subject to assessments, audits and/or verification visits by independent parties.", but not how "at risk" is determined.
Changed answer from "unknown" to "no" as the Wikirate guidance asks "unknown" to not be inputted as an answer