But what's your actual plan when an audit finds problems? A lot of places get the report and then just ask for a fix-it plan that drags on forever. The real test is if you have a clause to cut the contract immediately for major violations, and if you're ready to actually use it.
Seriously, that's the whole game right there. Everyone has a fix-it plan, but almost no one is ready to pull the trigger. You have to be willing to actually walk away.
Wood.richard is spot on about the cut clause, but the real power is in using it. Letting a supplier slide after a major violation tells everyone your ethics are for show. You have to be willing to burn a bridge to build a better one.