The Global Risks Forum (GRF)
Corporate governance decides how a company is directed and to whom it answers. Supply chains extend that question beyond the firm: environmental, human rights and integrity risks often arise at suppliers several tiers away, where the company has influence but not control. Due diligence is how companies identify, prevent, mitigate and account for those impacts. This page sets out how governance failure travels along value chains, how it can be read, and which decisions sit with boards, regulators and investors.
GRF · Established · service level R0
Supply chain due diligence is the process by which companies identify, prevent, mitigate and account for environmental, human rights and integrity risks in their own operations and across suppliers several tiers away, where they have influence but not control. A supplier audit is one input, not the whole process.
For corporate and supply chains, in GRF's situational-awareness reading, the map opens on population density, night lights and flood water with place names and borders from NASA GIBS, framed on Asia; every other NASA layer, live feed and forecast waits in the layer list.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 3
Activity and hazards, for this page
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
For corporate and supply chains, in GRF's situational-awareness reading, the map opens on population density, night lights and flood water with place names and borders from NASA GIBS, framed on Asia; every other NASA layer, live feed and forecast waits in the layer list.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.
Layers and dates
The working screen behind this subject: its structure, terms and states. Names are placeholders and values illustrative.
Corporate governance and supply chains · Council A · Meeting 10
| Risk appetite statement | P-892 | Approve | None | Discussing |
| New member admission | P-651 | Approve | Declared | Next |
| Safeguards annual review | P-524 | Note | None | Next |
| Data charter | P-668 | Consult | None | Done |
in place, of 12
Business governance and due diligence. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.
Most firms know their direct suppliers but not the tiers below. Forced labour, deforestation, unsafe conditions and bribery concentrate where traceability stops, and contractual distance becomes a reason for not knowing.
Price pressure, short lead times and late order changes are set at headquarters and absorbed by suppliers. Codes of conduct then ask suppliers to meet standards that the buyer's own purchasing practices make harder to meet.
Announced social audits and certificates can become a substitute for understanding risk. They sample a moment, can be prepared for, and rarely reach workers' grievances or unauthorised subcontractors.
Single-source inputs, concentrated logistics hubs and shared sub-suppliers link firms that believe their chains are separate. A failure at one node becomes a sector-wide shock, and the governance questions follow the loss.
Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.
| Term | Definition |
|---|---|
| Risk-based due diligence | Due diligence whose depth is proportionate to the severity and likelihood of adverse impacts. |
| Beneficial owner | The natural person who ultimately owns or controls a company. |
| National Contact Point | A body set up by governments adhering to the OECD Guidelines to handle complaints about responsible business conduct. |
Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.
| Indicator | Unit | Cadence | Source type | Label |
|---|---|---|---|---|
| Board-approved supply chain due diligence policy | yes or no, with scope | annual | Company governance and sustainability reports | DECLARED |
| Supplier tiers mapped and disclosed | number of tiers with published supplier lists | annual | Company disclosures | DECLARED |
| Grievance mechanism open to supply chain workers | yes or no; cases received and resolved | annual | Company reports and benchmark assessments | DECLARED |
| Human rights due diligence assessment | score by measurement theme | per assessment cycle | World Benchmarking Alliance assessments | ESTIMATED |
| Specific instances raised with National Contact Points | count by sector and issue | annual | OECD National Contact Point database | OFFICIAL |
| Import enforcement on forced labour grounds | count of detentions or bans by product | annual | Customs authority records | OFFICIAL |
| Beneficial ownership disclosed | share of supplier entities with known ultimate owners | annual | Beneficial ownership registers | OFFICIAL |
The topic as a computational graph: named sources feed the methods, an evidence review gates the outputs, and the decisions stay with the authorities that hold them.
Fig. 02Nodes carry their type, two metric rows and a state; connectors show what feeds what; dashed frames name the owners; the timeline is the cadence. Design of the pipeline, not a record of a run.
Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.
| Source | What it gives | Licence class |
|---|---|---|
| OECD National Contact Point database of specific instances | Complaints under the OECD Guidelines for Multinational Enterprises and how they were handled | Free, attribution (OECD terms) |
| World Benchmarking Alliance Corporate Human Rights Benchmark | Assessments of company human rights policies, due diligence and remedy | Free, attribution and WBA terms |
| Business and Human Rights Resource Centre | Allegations, company responses and legal cases concerning business impacts on human rights | Free for non-commercial use, attribution |
| UK register of persons with significant control | Beneficial ownership of UK companies | Open Government Licence |
| Beneficial Ownership Data Standard publications | Ownership data published to a common standard by participating jurisdictions | Open licences per publisher |
| Company filings and statutory statements | Annual reports, modern slavery statements and sustainability reports required by law | Public records, terms per register |
Governance Nexus prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.
| Who decides | The question | Evidence this page serves |
|---|---|---|
| Boards of directors | Whether due diligence is built into strategy, purchasing and remuneration, not only compliance | Due diligence process maps, decision-rights maps, comparable failures |
| Procurement and supply chain leadership | Which suppliers and tiers to map first, and which purchasing practices create risk | Risk-based prioritisation methods, sector risk evidence |
| Legislators and regulators | How mandatory due diligence and disclosure laws are scoped, supervised and enforced | Comparative laws, National Contact Point cases, enforcement records |
| Institutional investors | How to engage or vote on supply chain governance | Benchmark assessments, disclosed policies, grievance and remedy records |
Human rights and environmental due diligence, as set out in international guidance such as the UN Guiding Principles on Business and Human Rights and the OECD due diligence guidance, asks firms to identify, prevent, mitigate and account for adverse impacts in their operations and value chains. A growing number of jurisdictions have made elements of due diligence mandatory. Practice varies widely, from audit-based approaches that check suppliers against codes to deeper engagement on purchasing practices that drive abuses.
Resilience is a related but distinct concern. Lean, concentrated supply chains reduce cost but increase vulnerability to disruption, as events affecting key producing regions have repeatedly shown. Visibility beyond direct suppliers is often limited, so firms may not know where critical inputs originate. Governance must balance efficiency, resilience and responsibility.
Boards increasingly treat supply-chain risk as strategic, but oversight depends on information that management often lacks below the first tier.
Purchasing practices are a governance lever that is often overlooked. Short lead times, last-minute order changes and price pressure can push suppliers to excessive overtime or subcontracting, so governance that looks only at supplier compliance, and not at the buyer's own conduct, can miss the root cause.
Tracing suppliers and origins; visibility declines with each tier.
Assessing human rights and environmental risks by country, sector and supplier.
Studying whether audits and due diligence change outcomes; evidence is mixed.
Limits: audits can miss abuses, supplier data are often self-reported, and effects of due diligence laws are still being studied.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.