Modern Slavery Act 2018 (Australia)
Mandatory Criterion 3 - Modern Slavery Risks - Australia MSA 2018

Modern Slavery Act 2018 (Australia) AU-MSA-Mandatory-Criterion-3-Modern-Slavery-Risks-Operations-Supply-Chain-Section-16-1c-Sector-Geographic-Indicators: Australia MSA Mandatory Criterion 3 + Modern Slavery Risks + Section 16(1)(c) + Sector + Geographic Indicators

Address Mandatory Criterion 3 of Modern Slavery Statement under Section 16(1)(c) - describe risks of modern slavery practices in operations and supply chains of reporting entity + entities owned or controlled by reporting entity. Risk identification methodology including: country-level risk indicators (Global Slavery Index + Walk Free Foundation + ILO Forced Labour Index + USDOL List of Goods Produced by Child Labor or Forced Labor + TIP Report State Department Trafficking in Persons Report) + sector-level risk (high-risk sectors include textile + apparel + footwear + electronics + agriculture/horticulture + fishing + mining + construction + cleaning + hospitality + healthcare + transport + warehousing + ICT manufacturing) + product-level risk (cocoa + cotton + coffee + tea + sugar + tobacco + tin + tantalum + tungsten + gold + palm oil + seafood + bricks + carpets + electronics + apparel + leather) + workforce-level risk (migrant workers + recruitment fee debt + visa-tied workers + cash-economy + isolated workplaces + women + children). Department of Home Affairs Sector-Specific Guidance for: Healthcare + Retail + Construction + Agriculture + Cleaning + Hospitality + ICT + Migrant Worker Risk. Integration with COSO ERM + ISO 31000 + due diligence frameworks (UNGPs + OECD Due Diligence Guidance for Responsible Business Conduct + OECD Guidelines for Multinational Enterprises + Sector-Specific Due Diligence Guidance for Minerals Garments and Footwear Agriculture etc).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 64 controls across 41 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

API 1164 · 3 controls

  • API1164-21 TSA Pipeline Security Directive Alignment
  • API1164-22 Configuration management for OT systems
  • API1164-23 Change management procedures

IEC 62443 · 3 controls

  • IEC62443-21 Supply chain risk management for critical components
  • IEC62443-22 Configuration management for OT systems
  • IEC62443-23 Change management procedures

ISO 20400:2017 - Sustainable Procurement · 3 controls

  • ISO-20400-7.3 Supplier selection
  • ISO-20400-7.4 Contract management and review
  • ISO-20400-7.5 Reviewing and learning

ISO/IEC 27019:2024 · 3 controls

  • ISO27019-22 Configuration management for OT systems
  • ISO27019-23 Change management procedures
  • ISO27019-24 Vulnerability assessment for critical systems

NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production · 3 controls

  • AQAP2110-1 Quality Management System Aligned to ISO 9001 plus NATO Supplementary Requirements
  • AQAP2110-2 Government Quality Assurance Representative (GQAR) Authority and Access
  • AQAP2110-6 Subcontractor Supply Chain Control plus Counterfeit Material Prevention

APRA CPS 230 Operational Risk Management · 2 controls

  • CPS230-27 Identification and Escalation of Incidents and Near Misses
  • CPS230-49 Internal Audit Review of Proposed Critical Operation Outsourcing

Authorised Economic Operator (AEO) Programmes - Global Standards · 2 controls

  • AEO-2 Demonstrated Compliance with Customs Requirements
  • AEO-4 Financial Viability

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

  • CPG-6.A Vendor and Supplier Incident Reporting
  • CPG-6.B Supply Chain Incident Reporting

ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence · 2 controls

  • A.1 Point-of-Care Testing Additional Requirements
  • ISO-15189-6.8 Externally provided products and services

ISO 28001:2007 Supply Chain Security Management · 2 controls

  • ISO28001-PC-03 Supply Chain Incident Reporting
  • ISO28001-PC-04 Supply Chain Continuity Planning

ISO/IEC 27003:2017 · 2 controls

  • ISO27003-4.2 Understanding the needs and expectations of interested parties
  • ISO27003-8.1 Operational planning and control

OWASP DevSecOps Maturity Model (DSOMM) · 2 controls

  • DSOMM-3 Build, Deployment, Infrastructure Hardening, and Secrets Management
  • DSOMM-4 Test and Verification - SAST, DAST, IAST, SCA, Penetration Testing

21 CFR Part 211 - Current Good Manufacturing Practice · 1 control

  • CFR211-J-184 Section 211.184 - Component, Drug Product Container, Closure, and Labeling Records

AS9100D - Aerospace Quality Management System · 1 control

  • AS9100D-8.4 Control of Externally Provided Processes, Products, Services

Annex 11 to EU GMP - Computerised Systems · 1 control

  • Clause 3 Suppliers and service providers

Automotive SPICE (ASPICE) v4.1 - Process Assessment Model · 1 control

  • ACQ.4 Supplier Monitoring

FBI CJIS Security Policy · 1 control

  • CJIS-19 Supply Chain Risk Management

French Sapin II Law (Law No. 2016-1691) · 1 control

  • Sapin2-Pillar4-ThirdParty-DueDiligence Pillar 4 - Third-Party Due Diligence (Clients, Suppliers, Intermediaries, M&A)

IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1) · 1 control

ICAO Annex 17 - Aviation Security (AVSEC) · 1 control

  • ICAO-ANX17-Chap4-Cargo-Mail-Catering-Stores-Supplies-RegulatedAgent-KnownConsignor ICAO Annex 17 Chapter 4 - Cargo + Mail + Catering + Stores + Supplies Security + Regulated Agent + Known Consignor + Supply Chain

ICH Q10 - Pharmaceutical Quality System · 1 control

ISO 22316 · 1 control

  • ISO22316-14 Supply chain continuity

ISO 26000:2010 · 1 control

  • ISO-26000-6.6 Fair operating practices

ISO 41001:2018 - Facility Management Systems · 1 control

  • ISO-41001-8.4 Control of outsourced processes and services

ISO 50001:2018 - Energy Management Systems · 1 control

  • ISO-50001-8.3 Procurement

ISO/IEC 23894:2023 · 1 control

  • ISO23894-A.6 AI System Security

ISO/IEC 27010:2015 · 1 control

  • 27010-15.1 Incident Management

ISO/IEC 27011:2024 · 1 control

  • 27011-5.6 Supplier relationships and telecom supply chain

ISO/TS 22317:2021 · 1 control

  • ISO22317-14 Supply chain continuity

ISO/TS 22318:2021 · 1 control

  • ISO22318-14 Supply chain continuity

NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices · 1 control

OWASP Top 10 for LLM Applications 2025 · 1 control

  • OWASPLLM-4 Supply Chain and Vector/Embedding Weaknesses (LLM03 + LLM08)

OWASP Top 10:2025 · 1 control

  • OWASPTOP10-3 A03:2025 Injection Including Cross-Site Scripting

Ontario Accessibility for Ontarians with Disabilities Act (AODA) - IASR Web Standard · 1 control

  • AODACAN-2 Accessible Procurement of Goods, Services, Facilities

SQF Code Edition 9 - Safe Quality Food · 1 control

  • 2.7.2 Food Fraud Plan

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

  • IM8-TPM.4 Supply Chain Risk Management

South Korea ISMS-P · 1 control

  • ISMSP-PI-03 Third-Party Provision and Outsourcing

Space ISAC (Information Sharing and Analysis Center) - Threat Framework · 1 control

  • GT-3 Supply Chain Compromise

UK Defence Standard 05-138 - Cyber Security for Defence Suppliers · 1 control

USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement) · 1 control

  • USMCADIGITAL-4 Government Data, Cybersecurity, Interoperability

Vermont Data Privacy and Online Surveillance Act · 1 control

  • VERMONTAICDA-4 Vermont AG Enforcement and Cure

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 64 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Modern Slavery Act 2018 (Australia) controls