New supply-chain due-diligence laws are turning supplier risk management from a procurement task into a governance obligation.
What has changed
Regulators increasingly expect companies to know their sub-tier suppliers, assess human-rights and environmental risk, and show what they did about it.
Where to begin
Start with a risk-based map of your supply base, focus effort on high-risk categories and countries, and build a defensible audit trail.