They revalidated by implementing a risk-based parameter classification (Critical, Major, Minor) and added automated configuration drift detection.

Defines the system must do, tailored to the specific business process. 2. Supplier Assessment & Audit