Levels of assessment of the vendor’s control activities by the purchaser (second party) or independent body (third party) based on evaluation of the vendor’s capability to conform to the product or service specification and obligatory requirements.
