Although Recommendations are not mandatory, Suppliers are advised to follow the Recommendations provided. In this context, where the Supplier elects not to adopt the recommendations, it is expected that the decision is documented and based on a appropriate risk assessment and includes measures that will be put in place to mitigate the risks.