Introduction to the supplier risk assessment tool

In order for the document to work, it is important to enable macros. When you open the
document, excel will ask you whether you want to enable macros. Depending on your
excel version you can select "with macros", "macros" or "enable macros". If you haven't
done this, please close this document, reopen it and enable macros.
The tool's purpose: It is rarely possible or desirable to allocate the same amount of
resources and time to all ones suppliers. The purpose of this tool is to help you identify
which suppliers are the most critical and thus essential to monitor and help.
The tool's structure: The tool contains 3 sheets. The first sheet is the risk assessment
where you can assess which suppliers are important to focus your efforts on. All the data
from sheet 1 is transferred to the risk assessment matrix in sheet 2. The second sheet will
give you a visual overview of which risk groups you suppliers belong to. Sheet 3 should be
used to assess you suppliers in relation to the requirements you have chosen in your Code
of Conduct. All suppliers that you have deemed to belong to medium or high risk groups in
sheet 1 are transferred to sheet 3.

User guide
Sheet 1 Risk assessment: (used in connection with phase 2 in the CSR Compass)
You should insert your supplier's name and assess on a scale from 1 to 3 the commercial
relevance of the individual supplier towards your company; as well as how big the risk is
that the supplier violates fundamental principles and rights. Each supplier is assessed on a
scale where 1 corresponds to low risk, 2 to medium risk and 3 to high risk. When sheet 1
risk assessment is completed, push the purple classification button. It will categorise the
suppliers by risk degree, where highest risk is on top.
Sheet 2 Risk assessment matrix: (used in connection with phase 2 in the CSR
Compass)
Data from sheet 1 risk assessment is transferred to sheet 2 risk assessment matrix. The
risk assessment matrix helps give an overview of which risk groups your suppliers belong
to.
Sheet 3 Assessment: (used in connection with phase 4 in the CSR Compass)
All the suppliers in sheet 1 are transferred to sheet 3. You should now assess on a scale
from 1 to 3 the extent to which your suppliers comply with the different requirements set
out in your Code of Conduct. 1 corresponds to full compliance, 2 to partial compliance,
and 3 to lack of compliance. The assessment is undertaken based on a Supplier Self
Assessment for suppliers belonging to the medium risk group and supplier visits for
suppliers in the high risk group. The completed sheet can be used as a basis for a supplier
visit.

Important information
New rows: If you want to insert a new row, you should copy an existing row and insert
it to ensure that all formulas are transferred.
Classification: You should push the purple button in sheet 1 every time you update the
sheet to ensure that the suppliers are classified in accordance with highest risk.
Macros: The tool only works when you enable macros, so choose "with macros",
"macros" or "enable macros" when you open the document.
Save: The excel tool should always be saved as a "macro enable template (.xlsm)"

Suppliers

Risk of violating
social and
environmental issues

Commercial
relevance

Risk groups

Content
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0

Risk groups:
Low risk

Medium risk

High risk

Both "risk of violations" and

"commercial relevance" should be
assessed on a scale from 1 to 3.
Classify data:

Press here to classify the

data into risk groups

Commercial relevance. High risk if:

- You do a lot of business with the supplier
- The supplier is the sole supplier and would
be difficult and time-consuming to replace
- The supplier handles products bearing
your company logo
Risk of violating social and
environmental issues. High risk if:
- The supplier is located in a country where
respect for human rights and labour
standards is low and where the
enforcement of environmental standards is
similarly low.
- The supplier is used by sectors employing

- The supplier is the sole supplier and would

be difficult and time-consuming to replace
- The supplier handles products bearing
your company logo

0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0

Risk of violating social and

environmental issues. High risk if:
- The supplier is located in a country where
respect for human rights and labour
standards is low and where the
enforcement of environmental standards is
similarly low.
- The supplier is used by sectors employing
large numbers of low-paid workers and
hazardous materials or scarce natural
resources
- The supplier employs migrant and/or
seasonal workers.

0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0

Commercial relevance

Risk assessment matrix

3

0
0

Risk of violating social and environmental issues

Suppliers
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Comments

Corruption and
bribery

Company
products

Environmental
protection and
industrial
accidents

Land
management

Use of company
security forces

Conditions of
employment and
work

Workplace health
and safety

Freedom of
association

Discrimination

Child labour and

young workers

Forced labour

Risk
groups
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0
0.0

Guidelines:
Solely suppliers in medium or high risk
groups should appear in this sheet.
To classify the supplier into these risk
groups press the arrow in the "risk
groups" column and choose "bruger" and
then "er strre end" and write "1" in the
next box. At the end press "ok".
You should now assess on a scale from 1
to 3 the extent to which your suppliers
comply with the different requirements set
out in your Code of Conduct. 1
corresponds to full compliance, 2 to
partial compliance, and 3 to lack of
compliance. The assessment is
undertaken based on a Supplier Self
Assessment for suppliers belonging to the
medium risk group and supplier visits for
suppliers in the high risk group.
You will now receive a visual overview of
where you are most vulnerable and where
you should focus your efforts and best
prioritise your resources.