Thus, depending on the risk criteria associated with each country, a list of risk countries has been drawn up, and if the country of origin is included on this list, the supplier is subject to an audit, even if they are certified.