Supplier due diligence: separate identity, delivery capability, and sample evidence