The supplier has standard process to do periodic sub tier supplier onsite assessment on CI&IP control, change control, EHS and security to identify business risks. Corrective actions have been developed and closed for the gaps found during assessment.