https://www.ifsqn.com/forum/index.php/topic/42741-brcgs-3531-risk-assessment-of-service-suppliers/