Regulation (EU) 2023/1115 on deforestation-free supply chains 11(2): Maintain risk policies and controls, a management-level compliance officer and independent audit

What does 11(2) require?

Article 11(2): operators have adequate and proportionate policies, controls and procedures to mitigate and manage identified risks, including model risk management, reporting, record-keeping, internal control and compliance management; non-SME operators appoint a compliance officer at management level and have an independent audit function checking those policies, controls and procedures.