"Risk assessment is carried out by evaluating the impact and probability of criteria such as whether or not the supplier is the sole company, as well as the nationality, legal status, ethics, financial situation, geopolitical situation and institutional nature of each supplier. The risk assessment of each supplier and the supplier assessment score is placed separately in the Supplier Assessment Matrix and the action to be taken is determined." p. 50