3.2.2.7 Monitor risks involving the supplier and take corrective action as necessary