Do you have written procedures for reporting an incident to include a description of the facility’s internal escalation process? A notification protocol must be in place to report any suspicious activities or security incidents that may affect the security of the member’s supply chain