supply chain due diligence

What is Supply Chain Due Diligence?

Supply chain due diligence is the process of identifying, assessing and managing risks linked to a company’s suppliers and wider supply network. It helps organisations understand where goods and services come from, how suppliers operate and whether risks exist that could disrupt operations or cause legal, financial or reputational harm.

Companies now treat supply chain due diligence as an ongoing responsibility, rather than a one-off check.

What does supply chain due diligence involve?

Robust supply chain due diligence means looking beyond direct suppliers to understand the full chain of production and delivery. Companies assess who their suppliers are, where they operate and how they meet legal, ethical and operational standards.

Unlike basic supplier onboarding, supply chain due diligence takes a broader, risk-based view. It focuses on identifying issues before they escalate into compliance breaches or supply disruptions.

Why supply chain due diligence matters

Supply chains have become more complex and, therefore, more exposed to risk. Companies rely on third parties for critical inputs, making supplier failure or misconduct a direct business risk.

Supply chain due diligence helps organisations:

• Protect business continuity and resilience
• Avoid legal and regulatory breaches
• Reduce exposure to human rights and environmental risks
• Safeguard brand reputation and customer trust
• Meet investor and stakeholder expectations

What supply chain due diligence typically covers

A robust process looks at several risk areas, depending on the nature of the supply chain. Common focus areas include:

• Supplier identification and mapping: Understanding who supplies what, where suppliers operate and how critical they are to the business.
• Human rights and labour practices: Assessing risks such as forced labour, unsafe working conditions or breaches of employment law.
• Environmental and sustainability risks: Reviewing environmental impact, resource use and compliance with environmental regulations.
• Financial stability and resilience: Evaluating whether suppliers can meet contractual obligations and withstand market or economic shocks.
• Legal and regulatory compliance: Checking compliance with trade, sanctions, data protection and industry-specific laws.

When do companies need to carry out supply chain due diligence?

Companies typically carry out due diligence on supply chains:

• When onboarding new suppliers
• During mergers and acquisitions
• As part of ESG and sustainability reporting
• When entering new markets or regions
• After supply disruptions or incidents
• On a regular, ongoing basis for high-risk suppliers

Who is involved in supply chain due diligence?

Several teams usually contribute to the process. Key stakeholders include:

• Procurement and supply chain teams, who manage supplier relationships
• Legal and compliance teams, who assess regulatory exposure
• ESG and sustainability teams, who focus on social and environmental risks
• Risk and internal audit teams, who provide oversight
• Senior management and the board, who set risk appetite and priorities

Common risks identified through supply chain due diligence

• Human rights violations in upstream suppliers
• Environmental damage or regulatory breaches
• Sanctions or trade compliance failures
• Over-reliance on a single supplier or region
• Supplier insolvency or financial distress
• Cybersecurity weaknesses affecting shared systems

How to carry out supply chain due diligence

Most organisations follow a risk-based approach.This often includes:

• Mapping suppliers and prioritising high-risk areas
• Collecting information through questionnaires and documentation
• Conducting audits or site visits where necessary
• Monitoring suppliers on an ongoing basis
• Tracking remediation actions and improvements