Solution

German Supply Chain Act LkSG

Our cloud-based risk platform is tailored to help you comply with the German Supply Chain Act (LkSG) with efficiency and ease.

3 challenges

#1. ESG risks

Keeping an overview of the human right and environmental risks within the supply chain is essential considering evolving threats and the third-party due diligence requirements stated in the German Supply Chain Act (LkSG). Many organisations lack visibility and understanding of their third-party risk landscape.

#2. Stakeholder engagement

Engaging internal teams with risk management and internal control activities, such as risk profiling, control testing or assessment reviews, can be challenging due to a lack of understanding, inadequate communication, resistance to change or tool fatigue.

#3. Compliance workload

Risk professionals are confronted with an unprecedented challenge: the escalating complexity and volume of risk management and compliance tasks in combination with rising compliance costs and a lack of qualified personnel. This makes it difficult to perform all tasks in house, including LkSG due diligence.

Key benefits

  • Align with best-practices
  • Streamline processes
  • Improve stakeholder engagement
  • Standardise reporting
  • Improve decision-making
Solve your challenges

Our features to simplify & automate compliance

Risk management: One integrated risk register for all internal risk disciplines
Risk management: One integrated risk register for all internal risk disciplines

Register internal and external risks. Link risks to a specific third-party, internal control(s) and/or location within your organisation. Follow the ISO 31000 best-practice workflow containing of risk identification, assessment, treatment and monitoring. Use the interactive risk matrix to easily filter different risk disciplines and scores.

Third-party management: All your third-party information centralised and connected
Third-party management: All your third-party information centralised and connected

One integrated register for all your third parties. Register multiple contracts per third-party. Assign risk profiles to segment your landscape, taking into account multiple risk domains such as cybersecurity, sustainability and compliance. Connect with your procurement system to retrieve and enrich your supplier data.

Compliance management: Obtain a full overview of all your internal and external compliance requirements
Compliance management: Obtain a full overview of all your internal and external compliance requirements

One integrated register for all your internal & external compliance requirements Use it to manage compliance requirements for security, sustainability, privacy, legal, quality and many others. Define a specific scope & applicability per compliance requirement and link them to one or more assessment questionnaires. Monitor compliance in real-time.

Assessment management: Third-party self-assessment activities streamlined and automated
Assessment management: Third-party self-assessment activities streamlined and automated

Integrate the different third-party assessment efforts of all your risk and compliance disciplines. Combine questionnaires from different risk disciplines into one third-party assessment. Suppliers log in to a secure supplier portal in which they can collaborate and provide their evidence. Our AI-powered review module makes an initial analysis.

Real-time monitoring: Instantly receive alerts about your third-parties and follow-up efficiently and effectively
Real-time monitoring: Instantly receive alerts about your third-parties and follow-up efficiently and effectively

Continuously monitor your third-parties in 2 million news sources and receive instant alerts on negative news articles. Activate our out-of-the-box integrations with BitSight, SecurityScorecard, Ecovadis, Refinitif and many others to retrieve your third-parties' security, sustainability, financial or compliance risks ratings in one central overview.

Action plan management: Assign action plans to internal stakeholders and third-parties and track follow-up
Action plan management: Assign action plans to internal stakeholders and third-parties and track follow-up

Consolidate remediation actions across all internal teams and third-parties within a unified action plan repository. Assign ownership through our platform and Microsoft Teams. Set and adjust timelines for each action, with reminders to keep progress on track via our platform's virtual officer, e-mail and Teams. Visual indicators offer status updates, simplifying oversight.

Managed service: Outsource TPRM to one of our partners and benefit from their scale, expertise and global reach
Managed service: Outsource TPRM to one of our partners and benefit from their scale, expertise and global reach

For organisations with limited time or resources for third-party risk management, we have formed partnerships with esteemed experts in the field. These partners can fully manage the entire third-party risk management process for you, encompassing risk profiling, due diligence, and real-time monitoring, by using our fit-for-purpose platform. Schedule a conversation.

Some of our
German Supply Chain Act LkSG
clients and partners

Customer stories

FAQ

In the overview below, we have listed the most frequently asked questions and answers. Do you still have questions? Just reach out to one of our experts.

Does the 3rdRisk platform support compliance with the German Supply Chain Act (LkSG)?

Absolutely. Our vendor risk management platform is designed with the German Supply Chain Act requirements in mind. It also comes with several best-practice assessment templates (questionnaires) which can be completely customised to your specific situation.

Can 3rdRisk provide case studies or examples of succesful implementations?

Yes, at 3rdRisk we have numerous customer success stories to share. On our website we have a dedicated section with a selection of customer success stories. Please reach out to us if you want to know more. We are eager to connect you directly with one of our esteemed clients, enabling you to gain insights and information from their firsthand experience.

Can 3rdRisk help in managing third-party compliance risk?

Yes, 3rdRisk excels in managing third-party compliance risks. Our platform conducts comprehensive third-party assessments, including sanctions and PEP screenings, to ensure that all your external partnerships comply with the necessary standards and regulations.

Still have a question?

Our experts are always here to help you out.

By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.