• Management system: Suppliers must adopt or establish a management system designed to promote compliance with applicable laws and regulations, conformance with the Cisco code, and identification and mitigation of operational risks related to the code.