Ensure that third-party providers employ adequate security measures to secure the supply chain channels and regularly conduct information security assessment and audit according to the organisation’s information security policies;