Page 3. Independent auditor/trusted third party. Suppliers monitored by number of risks and the severity of each risk type.