Audit: Higher-risk suppliers must undergo either an on-site audit by qualified third-party auditors who use the EICC Validated Assessment Process (VAP), or an on-site audit by a qualified Intel auditor.