The company must review Step 1 information for discrepancies and for triggers of further due diligence: validate received material (type, weight, composition and quality) against documents and confirm red flag information was provided, investigating gaps; judge the plausibility of supply against national reserves, production and export data, mine information and secondary material content (with extra anomaly, plausibility and mined-or-recycled checks for precious group metals); determine CAHRAs through a documented process (resources, criteria, review frequency, recorded list, sanctions lists) covering at least the DRC and its nine neighbours and the EU indicative list; compare supplier and origin information with these results; record findings for by-products, intermediates, and verified out-of-scope materials; and conclude, with reasons, whether no Annex II assessment is needed, red flags can be cleared without on-the-ground work, or an Annex II risk assessment is required. Findings go to senior management.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.