New supply-chain due-diligence laws are turning supplier risk management from a procurement task into a governance obligation.

What has changed

Regulators increasingly expect companies to know their sub-tier suppliers, assess human-rights and environmental risk, and show what they did about it.

Where to begin

Start with a risk-based map of your supply base, focus effort on high-risk categories and countries, and build a defensible audit trail.