Governance-Driven Supplier Control