supplier due diligence questions