3.2.1.5 Identify risks associated with the selected COTS product and the supplier agreement