3.1.2.4 Evaluate risks associated with each proposed supplier