Modern Slavery Act 2018 (Australia)
Mandatory Criterion 4 - Actions Taken - Australia MSA 2018

Modern Slavery Act 2018 (Australia) AU-MSA-Mandatory-Criterion-4-Actions-Section-16-1d-Due-Diligence-Supplier-Code-Worker-Voice-Recruitment-Fees: Australia MSA Mandatory Criterion 4 + Actions + Section 16(1)(d) + Due Diligence + Supplier Code + Worker Voice + Recruitment Fees

Address Mandatory Criterion 4 of Modern Slavery Statement under Section 16(1)(d) - describe actions taken by reporting entity to assess and address modern slavery risks including due diligence and remediation. Policy framework including: Modern Slavery Policy + Human Rights Policy + Supplier Code of Conduct + Worker Code of Conduct + Whistleblower Policy + Anti-Discrimination Policy + Recruitment Policy. Contractual clauses with suppliers including: prohibition of modern slavery + audit rights + right to terminate + flow-down to sub-suppliers + remediation cooperation + Employer Pays Principle + zero recruitment fees + transparent recruitment + retention of identity documents prohibition + freedom of movement + freedom of association + decent working conditions + safe and healthy work + grievance access. Worker Voice and Grievance Mechanism including: direct worker grievance channel + anonymous reporting + third-party hotline + worker representative election + collective bargaining recognition + Just Good Work app + Issara Institute + Project Issara. Recruitment Fees and Worker Paid Costs - implement Employer Pays Principle (no worker pays for recruitment + travel + visa + medical + training + accommodation + uniforms). Due diligence processes including: supplier risk screening + onsite audits + virtual audits + worker interviews + document review + leveraging certifications (Sedex SMETA + amfori BSCI + SA8000 + Fair Trade + Rainforest Alliance + RJC + ASI + RSPO + RBA Responsible Business Alliance) + corrective action plans (CAPs) + remediation tracking + workers receive remediation. Sector partnerships and multi-stakeholder initiatives (Cotton Australia + Better Cotton + Roundtable on Sustainable Palm Oil + Marine Stewardship Council + Fairtrade + Rainforest Alliance + Ethical Trading Initiative + Bangladesh Accord + ACT Initiative + Cleansing Up Cocoa). Worker training and awareness. Operational training for procurement + HR + leadership.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 31 controls across 19 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 30111:2019 · 3 controls

  • 30111-1 Scope
  • 30111-3 Terms and definitions
  • 30111-8.1 Post-release monitoring

ISO/IEC 29147:2018 · 2 controls

  • 29147-5.6 Advisory Content and Quality
  • 29147-7.8 Remediation information

BSI IT-Grundschutz · 1 control

  • BSI-14 Vulnerability scanning and management
  • CPG-5.A Vulnerability Disclosure Program
  • CAT-D3-3 Corrective controls
  • FTC-Safeguards-ServiceProvider-Evaluation Service Provider Oversight + Program Evaluation + Personnel Training (16 CFR 314.4(d-g))

ISO/IEC 27011:2024 · 1 control

  • 27011-8.5 Vulnerability and malware management

ISO/IEC 27043:2015 · 1 control

  • ISO27043-25 Technical vulnerability management

ISO/IEC 29134:2023 · 1 control

  • 29134-9.2 Report findings and recommendations

ISO/SAE 21434 · 1 control

  • ISO21434-25 Technical vulnerability management
  • NGCB-6 Incident Response, 72-Hour NGCB Notification, and Independent Investigation

OWASP ASVS · 1 control

  • DSOMM-1 Culture, Organization, Education, and Governance

OWASP MASVS · 1 control

  • OWASPMASVS-6 MASVS-CODE: Code Quality, Build Settings, and Updates
  • IM8-SEC.4 Vulnerability Management

South Korea ISMS-P · 1 control

  • ISMSP-SYS-04 Vulnerability Management
  • UNGPBHR-2 Pillar II: Corporate Responsibility to Respect Human Rights

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 31 it maps to, and the evidence behind each claim, over MCP and REST.