Document a risk record and remediation measure

An identified risk for workers in the value chain is only documented defensibly once a remediation measure is linked to it and its outcome has been recorded. This guide takes you through the three steps in “Due Diligence Documentation”.

Prerequisites

• The associated due diligence process exists in the current reporting period.
• You are working in “Workers in the value chain → Due Diligence Documentation” and have opened the process detail page.
• If you want to assign a measure to a risk, that risk must already exist as a risk record.

Record the risk

1. On the process detail page, open the “Risk Identification Records” tab.
2. Click “Add Risk”. The “Add Risk Identification Record” dialog opens on the right.
3. Complete the “Risk Classification” section: “Subtopic” (mandatory field, the S2 subtopics from Working Conditions to Other Labour Rights as well as Multiple / Cross-Cutting), “Severity” (Low, Medium, High or Critical) and “Mitigation Status” (mandatory field, preselected as Identified).
4. Complete the “Risk Details” section: “Description” (mandatory field), “Identification Method” – for example audit or media analysis – and “Date Identified” (mandatory field, prefilled with the current date).
5. If needed, complete the “Scope” section with “Geographic Scope”, “Value Chain Tier” and “Affected Worker Category”.
6. Click “Create”. The risk appears in the table of the tab and is counted in the “Risks Identified” metric.

Derive the remediation measure

1. On the same process, switch to the “Remediation Records” tab and click “Add Remediation”. The “Add Remediation Record” dialog opens on the right.
2. In the “Classification” section, choose the “Remediation Type” (Corrective, Preventive, Compensation or Systemic) and set “Linked Risk Record” to the risk record you just created. Enter an external reference number in “External Reference”.
3. Complete the “Details” section. “Description”, “Responsible Party”, “Start” and “Planned Completion Date” (prefilled with three months after the start) are mandatory fields; “Affected Parties” is optional.
4. Click “Create”. The measure appears with status “Planned”, the planned date is displayed as “Due Date”, and the measure counts toward the “Open Remediations” metric.

Evidence the effect

1. In the “Remediation Records” tab, click the row of the measure and then click “Edit” on its detail page.
2. In the “Edit Remediation Record” dialog, update the “Status” and add “Actual Completion Date”, “Outcome Description” and “Lessons Learned”. Save with “Save”.
3. If the measure has demonstrably mitigated the risk, open the risk record, click “Edit” and set the “Mitigation Status” field in the “Edit Risk Identification Record” dialog to Mitigated.
4. Check the result via “Actions → Validate completeness” in the “DD Processes” section. The blocking check “High/critical severity risks have linked remediation records” must pass – otherwise risks with severity High or Critical without a linked measure count as a blocking deficiency.

Run the completeness check early and regularly: it shows exactly which processes you still need to activate or link with remediation measures before the reporting period can be completed.