I have a question regarding the interpretation of 18.104.22.168. We have a procedure for supplier performance evaluation. This procedure appears to be robust because the evaluation is done quarterly and there is a score card. Do we still need to conduct an on-site visit to the supplier site? I have a copy of CQI-19. Can I send the risk questionnaire to the supplier and ask them to answer the questions as best they could? They are all ISO9001 certified but not TS16949. Some suppliers may not be doing the core tools. DO I write them a nonconformance if I find out that they are not doing PFMEA, Control Plans, MSA and SPC? These are suppliers that have been identified as critical to the product we supply to FCA. Thank you for your comments.