https://www.ifsqn.com/forum/index.php/topic/27718-clause-411-supplier-approval-risk-assessment/