second-party conformity assessment activity