how to audit supplier data practices