Map the operations and business relationships relevant to each prioritised risk; check whether high-risk relationships have due diligence policies and management systems; use available impact assessments, legal reviews, audits, health and safety inspections, union and civil society reports and know-your-customer processes, notably for data enrichment services; and use an escalation system that flags high-risk sales, for example integrated with export control and sanctions checks, with criteria and further due diligence before approval, staff training on end-use risk, RBC in sales incentives and partner contracts, partner training, and a risk reporting channel for sales partners.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.