For suppliers identified as higher-risk, we perform full audits and for medium-risk suppliers we perform validation audits, which are used to confirm SAQ and KPI results, to identify gaps between suppliers’ performance and the code.