How often should I be assessing modern slavery risk?

A common question organisations ask is how often they should be assessing modern slavery risk across their operations, supply chains, and value chains.

This article focuses on assessing risk both upstream and downstream, including suppliers, partners, investments, distribution, product use, and impacts on workers and communities.

There is no single correct timeframe that works for every organisation. Guidance sets out clear expectations, and there are also practical considerations based on how organisations actually manage risk. For more on assessing risk within your own operations, see our article on assessing operational risk.

Remember the Purpose

Before deciding how often modern slavery risk should be assessed, it is worth stepping back and asking a more important question: why are we assessing it in the first place?

The purpose of modern slavery risk assessment is often misunderstood, which can lead organisations to focus on the wrong outcomes. Questions to ask include: 

• Are we assessing risk simply to understand where modern slavery might exist?Understanding risk is part of the process, but it is not the end goal. Risk assessments should help organisations identify where people may be vulnerable to exploitation and where action is needed.

• Are we assessing risk to terminate relationships with high risk suppliers or partners? It is widely recognised that simply cutting ties with high risk suppliers can increase the risk to workers. Disengagement can remove oversight and push vulnerable workers further into hidden or informal labour arrangements.

• Are we assessing risk purely to include the results in our modern slavery statement or annual report?
  Transparency is important, and organisations should absolutely report on their risk assessment processes. However, reporting cannot be the final step.

Both the UK Home Office Transparency in Supply Chains (TISC) and the UN Guiding Principles on Business and Human Rights (UNGPs) make the same point: risk assessment isn’t about producing a score or filling in a spreadsheet. It’s about understanding where people could be harmed and making decisions that actually reduce that harm.

Modern slavery risk assessment should ultimately lead to engagement, mitigation, and improvement. This is why prioritisation is so important.

Most organisations cannot engage with every supplier or partner at once. Focus on where your action will have the greatest impact: high-risk sectors, complex labour supply chains, large or vulnerable workforces, or organisations with weak modern slavery policies.

What the Guidance Recommends

Best practice for risk assessment, as defined by the TISC guidance and the UNGPs, is to integrate modern slavery risk assessment into business as usual (BAU) processes.

In practice this means risk assessment should be ongoing.

Embedding risk assessment into BAU allows you to respond quickly when significant changes occur, such as:

• changes in business structure
• mergers and acquisitions
• onboarding new suppliers or partners
• expansion into new countries or industries
• new investments or partnerships
• changes to production models or labour sourcing

The goal is simple: material changes in your operations or value chain should automatically trigger a reassessment of modern slavery risk.

Guidance emphasises looking across the full value chain, including downstream operations, product use, end-of-life, and community impacts.

If continuous monitoring isn’t possible for your organisation yet, you can still make your modern slavery risk assessments meaningful. 

Risk Prioritisation Funnel

A practical way to approach risk assessment is as a risk prioritisation funnel. At the top, a macro assessment helps you understand where inherent risk is highest across your supply chain and value chain. This then informs micro assessments and prioritised engagement with suppliers or partners where risk is greatest. The funnel approach ensures your efforts are focused on the areas that matter most and that risk assessment leads to real action, not just a report.

Macro Risk Assessment

Review your supply chain and value chain broadly every three years, or sooner if material changes occur.

Identify where inherent risk is highest using:

• geography
• sector or commodity
• workforce profile
• spend, size, and materiality can also support prioritisation

Macro assessment ensures there is a concrete, evidence-based methodology behind prioritising suppliers, industries, and areas for focus. We often see companies simply selecting industries they know are high risk. The problem with this approach is it relies on assumptions rather than data and can miss emerging risks or less obvious hotspots. A structured macro assessment ensures your priorities are robust, defensible, and targeted to where action can have the greatest impact.

Common engagement with all suppliers or partners at this stage can include awareness campaigns or supplier training on your code of conduct, helping them understand your expectations early and supporting accountability across your supply chain.

This stage will often highlight data gaps that need to be addressed before moving to the next step. Think about what information you already have, what you still need, and how you can collect it. This could include additional questionnaires, asking questions during regular supplier engagements, or accessing third-party platforms like Hellios or Ecovadis for extra insight. Filling these gaps ensures that your micro assessments and subsequent engagement are based on complete and reliable data.

Micro Inherent Risk Assessment

After the macro assessment identifies high-risk areas, a micro inherent assessment drills down into specific suppliers, partners, or investments. This uses more detailed data points, such as:

• workforce profiles
• subcontracting arrangements
• supplier self-assessment questionnaires (SAQs)
• third-party checks or media screening

Engagement at this stage is still broad but targeted. It can include supplier training, awareness campaigns, or guidance on improving policies and practices. Engagement may be industry-specific or focused on shared risks identified across suppliers, and can also include further SAQs to gather more detailed information. The goal is to ensure suppliers understand your expectations and begin addressing risks, while providing richer data to inform residual risk assessment and prioritised direct engagement.

Micro Residual Risk Assessment

The micro residual assessment focuses on areas where risk remains after the micro inherent assessment. It covers:

• suppliers or partners with high residual risk
• operations in high-risk geographies or sectors
• suppliers with complex labour supply chains
• organisations with weaker modern slavery policies or due diligence practices
• high-risk investments or portfolio companies

Engagement at this stage is direct and targeted. Examples include audits, site visits, one-to-one discussions with suppliers, and supplier partnership plans that provide a roadmap and hands-on support to uplift capabilities. The aim is to actively reduce risk and improve practices, focusing resources where the risk to people is greatest. Action plans should be agreed and progress tracked over time, ensuring engagement translates into real, measurable improvements rather than just compliance reporting.

Before moving forward, it is important to confirm that all data and findings from this phase are captured and linked to your overall risk prioritisation, including any outstanding gaps identified in prior stages. This ensures your risk assessment cycle remains robust and ready to inform the next round of macro or micro assessments.

How Unseen Can Help

We help organisations turn modern slavery risk assessment into practical, actionable outcomes...