Where suppliers are unable to satisfy us that they have appropriate risk management controls in place, or are unwilling to share this information, we may take further action, such as engaging senior management, implementing a remediation plan, or suspending the contract.