Introduction to CSR & Corporate Ethics

Chapter 8
Responsible Operations and Value Chains

Diploma in CSR and Corporate Ethics
Introduction to CSR & Corporate Ethics   •   Diploma

Responsible Operations and Value Chains

Introduction

Corporate social responsibility (CSR) is not confined to philanthropy, public statements, or environmental projects. It is expressed through the ordinary decisions by which an organisation hires people, designs products, purchases materials, manages suppliers, communicates with customers, and responds to harm. These activities form the organisation’s operations and value chain.

A value chain includes the activities and relationships through which an organisation obtains inputs, creates products or services, distributes them, supports customers, and manages end-of-life impacts. It includes employees, contractors, suppliers, logistics providers, distributors, customers, communities, regulators and, in some sectors, informal workers. Responsibility therefore extends beyond the legal boundaries of the organisation.

Responsible operations require organisations to identify actual and potential impacts, prevent or reduce harm, provide remedy where appropriate, and continuously improve performance. This chapter applies CSR principles to employment, diversity and inclusion, human rights, occupational safety, customers, marketing, procurement, suppliers and supply-chain due diligence.

Learning Objectives

By the end of this chapter, students should be able to:

  1. Explain why CSR applies to operations and value-chain relationships.
  2. Distinguish legal compliance, ethical responsibility and due diligence.
  3. Apply principles of employee welfare, diversity, inclusion and human rights.
  4. Evaluate occupational health and safety risks and controls.
  5. Assess responsible marketing, customer protection and product responsibility.
  6. Explain sustainable procurement and supplier management.
  7. Design a practical, risk-based supply-chain due-diligence process.
  8. Identify governance, reporting and remedial actions for responsible operations.

1. The Operational Meaning of CSR

CSR becomes credible when it is integrated into operational decisions. A company may publish a code of ethics, for example, but its operational conduct is determined by questions such as:

  • Are production targets compatible with safe working hours?
  • Are workers paid legally and fairly?
  • Can employees raise concerns without retaliation?
  • Are marketing claims accurate and understandable?
  • Are vulnerable customers protected from exploitation?
  • Are suppliers selected only on price, or also on labour and environmental performance?
  • Does the organisation respond effectively when a violation is discovered?

A useful distinction is between responsibility, accountability and liability. Responsibility is the ethical and managerial duty to act appropriately. Accountability is the obligation to explain decisions and accept evaluation. Liability is legal responsibility imposed through law or contract. An organisation may be legally compliant and still act irresponsibly, for example by using technically lawful but exploitative contract terms.

Operational CSR has three connected dimensions:

DimensionMain questionTypical evidence
PeopleAre workers, customers and communities treated fairly and safely?Accident records, wage data, grievance outcomes
PlanetAre resources used and pollution controlled responsibly?Energy, water, waste and emissions data
Prosperity and governanceAre decisions ethical, transparent and economically sustainable?Policies, controls, audits and board oversight

The stakeholder perspective is particularly important. Stakeholder theory holds that organisations create value through relationships with groups affected by their activities, not only through returns to owners. A decision that reduces purchasing cost but causes unsafe work, forced labour or environmental damage transfers costs to stakeholders rather than creating genuine efficiency.

2. Responsible Employment, Diversity and Inclusion

Employees are central stakeholders and rights-holders. Responsible employment covers recruitment, pay, working time, freedom of association, performance management, privacy, learning, health and safety, equality, dismissal and access to remedy.

2.1 Decent work

The International Labour Organization’s decent-work approach emphasises productive work, fair income, security in the workplace, social protection, opportunities for development, freedom of association and participation. Core labour principles commonly include:

  • freedom of association and effective recognition of collective bargaining;
  • elimination of forced or compulsory labour;
  • abolition of child labour;
  • elimination of discrimination in employment and occupation; and
  • a safe and healthy working environment.

Responsible employers should examine both direct employees and non-standard workers, including agency workers, temporary workers, contractors, migrants, platform workers and home-based workers. A policy that applies only to permanent staff may leave substantial risk unmanaged.

2.2 Diversity and inclusion

Diversity concerns the representation of differences such as gender, age, disability, ethnicity, nationality, religion, sexual orientation, socioeconomic background and educational experience. Inclusion concerns whether people can participate, contribute and progress with dignity and without barriers. Representation without inclusion can produce symbolic compliance rather than substantive equality.

An effective diversity and inclusion programme usually includes:

  1. baseline workforce data, collected lawfully and with privacy safeguards;
  2. objective recruitment and promotion criteria;
  3. accessible workplaces and reasonable accommodation;
  4. prevention of harassment and retaliation;
  5. pay-equity review;
  6. inclusive leadership capability; and
  7. confidential reporting and investigation processes.

Equal treatment does not always mean identical treatment. Reasonable accommodation, flexible work, accessible technology or targeted development programmes may be necessary to achieve fair participation. However, positive measures should be transparent, lawful and evaluated for effectiveness.

2.3 Psychological safety and speaking up

Employees need credible channels to report misconduct, safety risks or discrimination. A grievance mechanism should be accessible, confidential where possible, impartial, timely and protected against retaliation. A mechanism is ineffective if employees believe that reporting will damage their careers or if management focuses on suppressing complaints rather than correcting causes.

Managers should distinguish between a grievance mechanism, a whistleblowing channel and routine supervision. These channels may overlap, but serious allegations require defined escalation, evidence preservation and independent review.

3. Human Rights in Operations and Value Chains

Human rights are universal rights and freedoms recognised in international instruments. In business contexts, relevant rights include freedom from forced labour, freedom of association, privacy, equality, safe working conditions, adequate remuneration, freedom from violence and access to remedy.

The United Nations Guiding Principles on Business and Human Rights are organised around three pillars:

  1. The state duty to protect people from human-rights abuse.
  2. The corporate responsibility to respect human rights by avoiding infringement and addressing adverse impacts.
  3. Access to remedy for people who are harmed.

The corporate responsibility to respect applies even where local law is weak or enforcement is limited. It does not mean that a company controls every social outcome. It means that the company should identify how its activities and business relationships may contribute to or be linked with harm, and should use its influence responsibly.

3.1 Salient human-rights issues

Salience refers to the seriousness of a potential impact, commonly assessed through scale, scope and remediability. A low-probability event may still be salient if its consequences are severe. Typical value-chain risks include:

  • recruitment fees and debt bondage affecting migrant workers;
  • child labour in agricultural or mineral supply chains;
  • excessive working hours and withheld wages;
  • unsafe factories or construction sites;
  • discrimination against women or minority groups;
  • restrictions on worker representation;
  • land displacement and impacts on Indigenous Peoples;
  • privacy violations through surveillance or data misuse; and
  • forced labour in outsourced services.

3.2 Leverage and remediation

A company may have direct control over a subsidiary, contractual leverage over a supplier, commercial influence through purchasing volumes, or little apparent leverage over a distant sub-supplier. Lack of control does not eliminate responsibility. Appropriate responses may include contract requirements, training, joint improvement plans, purchasing-practice changes, collaboration with other buyers and responsible disengagement when remediation is impossible.

Remedy may include repayment of withheld wages, restoration of employment, medical support, correction of records, apologies, compensation or guarantees that misconduct will not recur. Audits alone are not a remedy.

4. Occupational Health and Safety

Occupational health and safety (OHS) is both a legal obligation and a fundamental ethical responsibility. Work-related harm may be physical, chemical, biological, ergonomic or psychosocial.

A conventional risk-management sequence is:

  1. identify hazards;
  2. assess risk;
  3. select controls;
  4. implement controls;
  5. monitor effectiveness; and
  6. investigate incidents and learn from them.

A risk is often assessed conceptually as a combination of likelihood and consequence:

Risk priority = Likelihood × Consequence

Likelihood is an assessed probability or category of occurrence, and consequence is the severity of potential harm. This is a prioritisation tool, not a universal scientific law. Organisations must define their scales consistently, avoid treating low probability as harmless where consequences are catastrophic, and supplement numerical scores with expert judgement and worker participation.

The hierarchy of controls gives priority to more reliable interventions:

  1. elimination of the hazard;
  2. substitution with a less hazardous process or material;
  3. engineering controls that isolate people from the hazard;
  4. administrative controls such as procedures, training and scheduling; and
  5. personal protective equipment.

Personal protective equipment is important but usually less reliable than elimination or engineering controls because it depends heavily on correct selection, fit, maintenance and worker behaviour.

Safety indicators should include both lagging and leading measures. Lost-time injuries and occupational illness are lagging indicators: they show harm that has already occurred. Preventive maintenance, hazard reports, training quality, corrective-action closure and worker safety observations are leading indicators. A low injury rate does not prove that a workplace is safe; under-reporting may explain the result.

Psychosocial risks include excessive workload, bullying, violence, insecure work, isolation and lack of control. Responsible OHS management therefore includes mental health, respectful supervision and reasonable work design, not merely protective equipment.

5. Customers, Product Responsibility and Marketing Ethics

Customers may be exposed to physical, financial, informational or psychological harm. Responsible customer management includes product safety, quality, accessibility, privacy, fair contracts, complaint handling and accurate communication.

5.1 Product and service responsibility

Before launch, organisations should consider foreseeable misuse, vulnerable users, accessibility and the consequences of failure. Product responsibility continues after sale through instructions, warnings, maintenance, recall systems and complaint analysis.

Digital products create additional issues: collection and use of personal data, algorithmic discrimination, dark patterns, cybersecurity and explainability. Data minimisation, purpose limitation, security controls and meaningful consent are practical safeguards, although the precise legal requirements vary by jurisdiction.

5.2 Ethical marketing

Marketing becomes unethical when it misleads, conceals material information, exploits vulnerability or encourages harmful consumption. Common problems include:

  • unsupported environmental claims;
  • fabricated endorsements or reviews;
  • hidden fees and difficult cancellation;
  • discriminatory targeting;
  • manipulative design that impairs informed choice; and
  • advertising directed at children without appropriate safeguards.

An environmental claim should be specific, evidence-based, understandable and proportionate. For example, “packaging contains 30% recycled material” is more verifiable than “eco-friendly.” Claims should identify the product, boundary, evidence and relevant comparison. A company should not highlight a minor improvement while concealing a major adverse impact.

Complaint data should be treated as an operational learning resource. Repeated complaints about billing, safety or accessibility may indicate a systemic design failure rather than isolated customer dissatisfaction.

6. Responsible Procurement and Supplier Relationships

Procurement decisions influence labour conditions, environmental performance and market behaviour. Traditional procurement often emphasises price, quality and delivery. Responsible procurement adds social, ethical, environmental and governance criteria.

A responsible procurement process includes:

  • a supplier code aligned with recognised standards;
  • risk-based supplier screening;
  • proportionate pre-qualification requirements;
  • clear contractual expectations;
  • fair purchasing practices;
  • supplier capability-building;
  • monitoring and verification;
  • escalation and remediation; and
  • responsible exit where necessary.

6.1 Purchasing practices as a risk factor

Suppliers may violate standards partly because buyers impose unrealistic prices, sudden order changes, short lead times or late payments. A buyer cannot demand decent working conditions while systematically making them commercially impossible. Responsible procurement therefore examines the buyer’s own behaviour.

Contracts should avoid excessive duplication of audits and should specify reporting, access to records, worker protection, subcontracting controls, incident notification and remedies. However, contractual language alone does not produce ethical performance. Suppliers need practical support, predictable demand and fair treatment.

6.2 Supplier segmentation

Suppliers can be segmented by spend, strategic importance, country or sector risk, complexity and potential severity of impact. A small supplier in a high-risk sector may require more attention than a large supplier in a low-risk sector. Risk-based segmentation helps organisations allocate limited resources.

A useful distinction is between inherent risk and residual risk. Inherent risk exists before controls; residual risk remains after controls. A supplier may have strong policies but still present high residual risk if worker interviews, incident data or credible allegations reveal continuing harm.

7. Supply-Chain Human-Rights Due Diligence

Due diligence is an ongoing, risk-based process rather than a one-time certification exercise. The OECD responsible-business-conduct approach commonly describes six connected steps:

  1. embed responsible business conduct into policies and management systems;
  2. identify and assess actual and potential adverse impacts;
  3. cease, prevent or mitigate impacts;
  4. track implementation and results;
  5. communicate how impacts are addressed; and
  6. provide for or cooperate in remediation when appropriate.

7.1 A practical due-diligence cycle

Step 1: Establish governance. Assign board or senior-management responsibility, define roles, integrate expectations into procurement and operations, and train relevant staff.

Step 2: Map the value chain. Identify suppliers, countries, materials, labour intermediaries, logistics providers, subcontractors and high-risk processes. Mapping should improve over time; lack of perfect information is not a reason to postpone action.

Step 3: Prioritise risk. Consider severity, likelihood, affected groups, proximity to the organisation and the organisation’s contribution or connection to harm. Prioritisation should focus on people, not only on financial exposure.

Step 4: Engage rights-holders. Workers, communities, trade unions, Indigenous representatives and civil-society organisations can provide information that management systems miss. Engagement must be safe, accessible and free from retaliation.

Step 5: Act. Actions may include changing purchasing practices, improving safety, repaying recruitment fees, strengthening freedom of association, redesigning products or suspending a harmful activity.

Step 6: Monitor and communicate. Use evidence from worker feedback, incident reports, audits, corrective actions and outcome indicators. Public communication should be balanced and avoid claiming perfection.

Step 7: Remedy. Where the organisation caused or contributed to harm, it should provide or cooperate in remedy. Where it is merely linked through a business relationship, it should use leverage and support remedy while clarifying its role.

7.2 Audits and their limitations

Social audits can identify documentation gaps and visible hazards, but they are limited by short visits, falsified records, coached interviews, language barriers, auditor competence and fear of retaliation. A passing audit is not proof that rights are respected.

More reliable systems combine announced and unannounced assessments where lawful, confidential worker interviews, grievance data, payroll and working-time analysis, supplier dialogue, local civil-society information and follow-up verification. Technology can support traceability and anomaly detection, but digital records do not automatically represent worker experience.

8. Measuring Responsible Operations

Measurement should support learning and accountability rather than create a misleading appearance of performance. A balanced system may include:

AreaExample indicatorsImportant caution
EmploymentVoluntary turnover, pay gaps, training accessAverages can hide inequality
InclusionRepresentation, promotion rates, accommodation requestsPrivacy and self-identification matter
Human rightsAllegations, remedy completion, recruitment-fee repaymentCounts alone do not show severity
SafetySerious incidents, hazard closure, near-miss reportingLow reporting may indicate fear
CustomersComplaints, recalls, accessibility defectsFast closure is not always fair resolution
SuppliersCorrective-action completion, worker feedback, audit qualityAudit volume is not impact reduction

Where a percentage is used, its definition must be clear. For example, the supplier corrective-action completion rate can be expressed as:

Completion rate (%) = (Corrective actions verified as complete ÷ Corrective actions due) × 100

This measure is meaningful only when “verified as complete” is defined, the reporting period is stated, overdue actions are not excluded, and verification assesses effectiveness rather than paperwork alone.

Organisations should disaggregate relevant data by location, gender, employment status or other lawful categories. They should also combine quantitative measures with qualitative evidence, because dignity, fear and loss of voice cannot be fully represented by a single number.

9. Applied Case: Meridian Apparel’s Responsible Sourcing Programme

The following is an illustrative case.

Background

Meridian Apparel, a medium-sized clothing retailer, sourced garments through 80 factories in four countries. Its supplier code prohibited child labour, forced labour and discrimination. Procurement managers, however, were rewarded mainly for reducing unit cost and obtaining rapid delivery.

Problem

A worker organisation reported that one factory used a labour broker who charged migrant workers recruitment fees. Workers then worked excessive overtime to repay debt. The factory had passed two customer audits. Meridian initially considered terminating the factory immediately.

Analysis

The audit results did not resolve the allegation. Interviews indicated that workers feared dismissal, and payroll records did not include all hours. Meridian’s purchasing practices included late design changes and penalties for delayed delivery, creating incentives for overtime. The company was therefore connected to harm through the supplier and may have contributed through its own purchasing behaviour.

The most serious risks were debt bondage, excessive working time and retaliation. Immediate termination could remove Meridian’s leverage and leave workers without income, although continued purchasing without conditions would also be irresponsible.

Approach and solution

Meridian took the following actions:

  1. commissioned an independent investigation with confidential worker interviews;
  2. required repayment of prohibited recruitment fees;
  3. prohibited retaliation and established a worker-accessible grievance channel;
  4. required accurate time recording and payment of legally owed wages;
  5. revised delivery schedules and stopped punitive penalties while remediation was underway;
  6. trained procurement staff on responsible purchasing;
  7. created a time-bound improvement plan with worker and union participation; and
  8. defined escalation criteria if the factory failed to cooperate.

Meridian also reviewed other suppliers using the same labour broker and expanded mapping beyond first-tier factories.

Outcome

After six months, verified repayment had been made to most affected workers, working-time records improved and the factory appointed an independent worker liaison. A small number of cases remained unresolved, so Meridian continued monitoring and required additional remedy. The company reported the nature of the issue and its response without identifying workers.

Learning points

The case demonstrates that:

  • a supplier audit is not equivalent to due diligence;
  • purchasing practices can contribute to labour harm;
  • immediate disengagement is not always the best first response;
  • worker voice is essential evidence;
  • remediation should benefit affected people, not merely improve documentation; and
  • responsible sourcing requires procurement, human resources, legal, sustainability and senior management to work together.

10. Governance, Regulation and Contemporary Developments

Responsible operations require governance at several levels. The board should oversee material human-rights, safety and customer risks. Senior management should allocate resources and integrate responsibility into incentives. Procurement should own supplier relationships, while sustainability or ethics teams provide expertise and challenge. Internal audit can test controls, but it should not replace operational ownership.

Regulatory expectations are increasingly moving from voluntary statements toward mandatory due diligence, modern-slavery reporting, product-safety requirements, data-protection obligations, non-financial disclosure and restrictions on misleading environmental claims. Requirements vary by jurisdiction, so organisations must maintain a legal register and avoid assuming that a global policy automatically satisfies every local rule.

Technology can improve traceability, supplier data management, grievance access and risk screening. Artificial intelligence may identify unusual working-time or payment patterns, but it introduces risks of biased classification, surveillance and false confidence. A responsible approach requires human review, data governance, explainability, security and consultation with affected workers. Technology should support, not replace, human-rights judgement.

Climate transition and geopolitical disruption also affect responsible value chains. Sudden supplier exit, rapid decarbonisation or mineral substitution may create new labour and community impacts. Organisations should assess just-transition issues, worker consequences and community rights when changing operations.

11. Best-Practice Principles

A practical responsible-operations system should follow these principles:

  1. Put people at the centre. Assess impacts on affected people, not only corporate risk.
  2. Integrate responsibility into decisions. Include CSR in procurement, product design, incentives and budgeting.
  3. Prioritise severity. Address the most serious harms first.
  4. Use meaningful engagement. Listen to workers, communities and customers.
  5. Improve purchasing behaviour. Do not transfer unreasonable cost and time pressure to suppliers.
  6. Combine evidence sources. Use audits, data, interviews, grievances and local knowledge.
  7. Protect reporters. Prevent retaliation and ensure credible investigation.
  8. Remediate harm. Focus on restoring rights and preventing recurrence.
  9. Report honestly. Explain limitations, unresolved issues and progress.
  10. Review continuously. Value-chain risks change with markets, technology, regulation and organisational decisions.

Chapter Summary

Responsible operations and value chains are the practical expression of CSR. Organisations must consider the effects of their employment practices, purchasing decisions, products, marketing, suppliers and business relationships. Responsible employment requires decent work, equality, inclusion, worker voice and protection from retaliation. Human-rights responsibility is guided by the principles of protection, respect and remedy, with due diligence focused on actual and potential impacts.

Occupational safety is managed through hazard identification, risk assessment and the hierarchy of controls. Customer responsibility includes safe products, privacy, accessibility, fair contracts and accurate marketing. Responsible procurement combines commercial criteria with social, environmental and governance considerations and recognises that buyer behaviour can contribute to supplier harm.

Supply-chain due diligence is an ongoing cycle of governance, mapping, prioritisation, action, monitoring, communication and remedy. Audits and metrics are useful but incomplete; worker participation and qualitative evidence are essential. Effective governance integrates responsibility into senior oversight, procurement systems, incentives, technology controls and organisational learning.

Key Terms

Accountability: The obligation to explain decisions, accept evaluation and respond to consequences.

Business relationship: A relationship with an organisation’s partners, suppliers, contractors or other entities connected to its operations.

Corrective action: A measure designed to address a detected problem and prevent recurrence.

Decent work: Work that provides dignity, fair conditions, security, rights and opportunities for development.

Due diligence: An ongoing process to identify, prevent, mitigate, track and communicate responses to adverse impacts.

Diversity: The presence of differences among people in a workforce or stakeholder group.

Grievance mechanism: A formal or informal channel through which concerns or complaints can be raised and addressed.

Human rights: Universal rights and freedoms to which all people are entitled.

Inclusion: The extent to which people can participate, contribute and progress fairly.

Inherent risk: Risk that exists before controls are applied.

Leverage: The ability to influence another organisation or relationship.

Occupational health and safety: The prevention and control of work-related injury, illness and psychosocial harm.

Remedy: Action to correct, compensate for or restore people affected by harm.

Responsible procurement: Purchasing that considers ethical, social, environmental and governance impacts as well as commercial factors.

Residual risk: Risk remaining after controls are implemented.

Salient human-rights issue: A potentially severe human-rights impact requiring priority attention.

Stakeholder: A person or group that affects or is affected by an organisation.

Supply chain: The network involved in sourcing, producing, moving and delivering goods or services.

Value chain: The broader set of activities and relationships through which an organisation creates and delivers value.

Review Questions

Short Answer Questions

  1. What is the difference between diversity and inclusion?
  2. State the three pillars of the UN Guiding Principles on Business and Human Rights.
  3. Why are audits alone insufficient for supply-chain due diligence?
  4. List the five levels in the hierarchy of OHS controls.
  5. What is meant by responsible procurement?

Long Answer Questions

  1. Explain how CSR responsibilities extend beyond an organisation’s legal boundaries into its value chain.
  2. Discuss the relationship between human-rights due diligence, leverage and remediation.
  3. Explain how purchasing practices can contribute to poor labour conditions and identify corrective measures.
  4. Evaluate the role of worker voice and grievance mechanisms in responsible operations.
  5. Describe how an organisation can integrate diversity, inclusion and employee welfare into its management systems.

Analytical / Application Questions

  1. A supplier has passed several audits, but workers report unpaid overtime and retaliation. Analyse the evidence and propose a responsible response.
  2. A company wants to advertise a product as “100% sustainable.” What questions should its marketing, procurement and sustainability teams ask before approving the claim?
  3. Design a due-diligence plan for a company entering a country where migrant labour, subcontracting and weak regulatory enforcement create significant human-rights risks.

Multiple Choice Questions with Answers

Question 1

Which statement best describes supply-chain due diligence?

A. A one-time supplier certification exercise

B. An ongoing process of identifying, addressing, tracking and communicating impacts

C. A method used only to reduce purchasing costs

D. A process limited to checking legal registration documents

Correct Answer: B. An ongoing process of identifying, addressing, tracking and communicating impacts

Question 2

Which control is highest in the hierarchy of controls?

A. Personal protective equipment

B. Worker training

C. Hazard elimination

D. Warning signs

Correct Answer: C. Hazard elimination

Question 3

What is the main difference between diversity and inclusion?

A. Diversity concerns representation, while inclusion concerns participation and belonging

B. Diversity concerns safety, while inclusion concerns accounting

C. Diversity applies only to suppliers, while inclusion applies only to customers

D. There is no meaningful difference

Correct Answer: A. Diversity concerns representation, while inclusion concerns participation and belonging

Question 4

Which practice is most likely to undermine responsible procurement?

A. Providing predictable orders

B. Including worker-safety criteria in supplier selection

C. Using fair payment terms

D. Imposing unrealistic delivery schedules and prices

Correct Answer: D. Imposing unrealistic delivery schedules and prices

Question 5

Under the UN Guiding Principles framework, access to remedy means that organisations should:

A. Avoid receiving complaints

B. Provide or cooperate in correcting harm where appropriate

C. Transfer all responsibility to government

D. End every supplier relationship immediately

Correct Answer: B. Provide or cooperate in correcting harm where appropriate

Question 6

Which is a leading OHS indicator?

A. Fatality rate

B. Lost-time injury rate

C. Number of hazards reported and corrected

D. Number of occupational illnesses diagnosed

Correct Answer: C. Number of hazards reported and corrected

Question 7

Which marketing claim is most likely to be responsible and verifiable?

A. Our product is perfect for the planet

B. The product has no environmental impact

C. Packaging contains 30% recycled material, based on documented material records

D. The greenest product ever made

Correct Answer: C. Packaging contains 30% recycled material, based on documented material records

Question 8

Why should companies examine their own purchasing practices during supplier due diligence?

A. Buyer decisions can create pressure that contributes to excessive hours or unsafe work

B. Purchasing practices are unrelated to supplier conditions

C. It eliminates the need for supplier engagement

D. It guarantees that every supplier will meet all standards

Correct Answer: A. Buyer decisions can create pressure that contributes to excessive hours or unsafe work

Question 9

What does residual risk mean?

A. Risk that exists before any controls are applied

B. Risk remaining after controls are implemented

C. Risk transferred to customers by contract

D. Risk that cannot be measured

Correct Answer: B. Risk remaining after controls are implemented

Question 10

Which response best reflects a risk-based approach to supplier management?

A. Audit every supplier identically regardless of risk

B. Focus resources on potentially severe impacts and affected people

C. Select suppliers solely according to annual spend

D. Terminate all suppliers that report a problem

Correct Answer: B. Focus resources on potentially severe impacts and affected people

Introduction to CSR & Corporate Ethics
Chapter 8 of 14