In Scope or Out(sourced)! Is your supplier’s ISO certificate applicable?