Mechanisms exist to address identified weaknesses or deficiencies in the security of the supply chain
Does the organization address identified weaknesses or deficiencies in the security of the supply chain