Book your place on ETI Human Rights Essentials

What is risk-based due diligence – and why does it matter?

30 April

In the first video in Charles Russell Speechlys’ supply chain series, partner Kerry Stares and Inherently Human founder Louise Herring cut through the complexity to explain the risk-based approach that underpins both the UN Guiding Principles on Business and Human Rights and the EU Corporate Sustainability Due Diligence Directive.

They cover what salient human rights risks are, why standardised supplier questionnaires fall short, and how companies can begin mapping their value chains to find where harm to people is most likely.

Key themes

Risk-based due diligence keeps the focus on people. The UN Guiding Principles and the CSDDD both require a risk-based approach, one that prioritises salient risks based on severity of harm. Salience is assessed by scope, scale, and remediability, with likelihood factored in. The starting point is always: where could the worst harm occur?

Standardised approaches create a false sense of progress. Sending the same questionnaire to every tier one supplier burdens low-risk relationships while leaving the highest-risk parts of the supply chain unexamined. A risk-based approach requires visibility and prioritisation.

Supply chain opacity is a structural challenge that demands attention. Smallholder farming, artisanal mining, logistics, and warehousing are inherently difficult to map, and that difficulty is precisely why they need it. The best way to make progress is to start with the highest-risk chains, build visibility tier by tier, and iterate as you learn.

Forced labour and child labour remain deeply embedded in global supply chains. In sectors like cotton, cocoa, cobalt, and palm oil, these are common salient risks. Migrant workers carrying recruitment debt are especially vulnerable. Recognising this is the first step to addressing it.

Due diligence is iterative. Risk assessments should be ongoing and dynamic, drawing on audits, grievance mechanisms, worker dialogue, and increasingly technology. The goal is a live, evidence-based picture that leads to action.

About Kerry Stares

Kerry Stares is Responsible Business and Pro Bono Partner at Charles Russell Speechlys. She advises on human rights due diligence, supply chain risk, and responsible business conduct, and works with organisations navigating the growing body of international regulation in this area.

The conversation (full transcript)

Kerry Stares: Hello, I’m Kerry Stares, a partner at Charles Russell Speechlys. Welcome to the first short video in our supply chain series on how to do risk-based human rights due diligence. I’m joined by Louise Herring, founder of Inherently Human, a UK human rights consultancy.

If you haven’t already watched our earlier videos on why doing risk-based human rights due diligence makes good business sense, you can find those on our website.

Today we’re going to cover two things. First, what is risk-based human rights due diligence? And second, how to start and refine a risk-based human rights due diligence process.

The UN Guiding Principles on Business and Human Rights, or the UN GPs, which have set the benchmark for best practice since 2011, expect companies to do risk-based human rights due diligence. A risk-based approach is also what’s required by the recently amended EU Corporate Sustainability Due Diligence Directive, or the CSDDD. In a world where businesses can impact many people in different ways across complex value chains, a risk-based approach, in essence, means that businesses must prioritise their salient human rights risks.

Louise Herring: Salient human rights risks are the risks that stand out because they could cause the most severe harm to people, either through a company’s own activities or its business partners. To judge severity, we look at scope, scale, and remediability. Scope is how many people could be affected. Scale is how grave the harm would be. Remediability is how hard it would be to put things right. Then we consider likelihood, or probability, of risks occurring. Together, these help you focus on the risks that matter most to people.

That’s an important point to stress. Salience is about risk to people, not risk to the business.

Forced labour and child labour are common salient risks in many supply chains, including sectors like cotton, cocoa, cobalt, and palm oil. Migrant workers in manufacturing can be particularly vulnerable, especially where recruitment fees create debt. These risks can be deep-rooted and hard to tackle, which is precisely why they demand prioritised attention.

Kerry Stares: Some companies still take a more basic and standardised approach to human rights, often limiting their engagement to their direct or tier one suppliers and requiring them all to complete a standard human rights questionnaire or to agree to standard contractual terms relating to human rights risks. This is not a risk-based approach. It can place a heavy and unnecessary administrative burden on low-risk parts of your supply chain and obscure where the risks are highest.

So where do you start with a risk-based human rights due diligence process? You can’t assess risks without basic visibility of where your products and services come from and who’s involved. The best starting point, therefore, is a high-level review of your business operations and value chain to identify those activities, geographies, products, and relationships where risks to people are most salient.

In practice, carrying out this high-level review – or scoping exercise, as it’s referred to in the new CSDDD – means using available information on high-risk sectors, countries, or regions to identify areas of your business and value chain where adverse impacts are most likely. The approach will vary for each company depending on size and resources. Larger companies might commission external organisations to support them. Smaller businesses might do robust work with public sources on country and sector risks, supplemented by what they know about specific sites — for example, wages, health and safety practices, recruitment practices, and channels through which workers can engage.

This initial review or scoping exercise can be complex. Some companies have thousands of direct suppliers and many more indirect ones. Certain supply chains – like smallholder farming, artisanal mining, logistics, or warehousing – are often opaque and employ vulnerable workers. Data can be fragmented and quickly outdated. Most companies therefore start by mapping and reviewing their highest-risk supply chains, building visibility tier by tier and iterating as they learn.

Louise Herring: The next step is to do a more in-depth assessment, focusing on the most salient – that is, the most severe and most likely – risks to people. Increasingly, companies use diverse sources of data to do this, including audits, grievance mechanisms and hotlines, as well as talking to trade unions to understand workers’ perspectives. Some also use technology, including AI, to scan for risk signals. Whatever the tools, the aim is the same: build an evidence-based picture of where severe harm to people is most likely, increase transparency, and encourage suppliers to be open about sourcing risks.

For complex supply chains, you will find more than one salient risk. Seafood may require a focus on vessel-based labour risks, for example. Electronics may require deeper raw material scrutiny. Garments may require attention to factory and mill conditions. You won’t fix everything at once, so be explicit about priorities, timelines, and resourcing – and be ready to say “not now” where necessary, while still planning how and when you will come back to those issues.

Kerry Stares: In summary: keep the focus on risks to people. Start where the risk is greatest. Use mapping to build your visibility and keep iterating, because risks evolve. Supply chain mapping and risk assessments should be ongoing and dynamic, and lead to actions that prevent, mitigate, or remediate risks.

Thank you for watching. Please look out for more videos in this series on how to do risk-based human rights due diligence. These videos are designed to give you a taster of what’s involved. For more information and tailored advice, please get in touch.

Take the next step

Ready to take the next step?
Get in touch to discuss how we can support your human rights journey.

Get in touch

Stay in touch. Sign up to our newsletter for human rights insights and updates delivered direct to your inbox.

Name(Required)
(Required)