Responsible Mineral Sourcing: From Risk Mapping to Ongoing Review

In-depth analysis

Treat due diligence as an ongoing process

Responsible mineral sourcing is not a certificate collected once and filed away. It is a process for identifying, assessing and addressing risks in the supply chain, with the depth of review proportionate to the product, origin, participants and potential impacts. The OECD guidance provides a framework for risk-based due diligence, particularly in conflict-affected and high-risk contexts. Buyers should determine which obligations and frameworks apply to their own transaction.

Start by defining the material, source, route, counterparties and intended use. State what is known and what remains unverified. The same mineral can pass through several legal entities, transport stages and processing facilities, so a product description alone does not show the full chain. The mapping exercise should make those relationships visible enough to decide what needs closer review.

Map the supply chain

List each participant from extraction or collection through aggregation, processing, export, transport and delivery. Record the country and facility associated with each step, the role of each entity and the documents that support the connection. For mixed or processed material, explain how batches are identified and what traceability information can reasonably be retained.

Ask suppliers how they know who provided the material and how they handle changes in source or route. Compare the answers with purchase records, transport documents, licences and independent information where available. If the supply chain is not fully traceable, state the limitation and assess whether additional checks or a narrower sourcing scope are needed. Do not claim traceability beyond the evidence.

Identify risks that fit the context

Risk assessment should reflect the location, material, participants and business relationship. Issues may include serious human-rights impacts, conflict financing, bribery, unsafe working conditions, environmental harm, illegal extraction, opaque beneficial ownership or inaccurate origin information. The relevant risks and their severity should be assessed by people with appropriate local and sector expertise.

Use more than one source when a concern could affect a decision. Review credible public information, government records, supplier disclosures, audit findings and information from knowledgeable stakeholders, with due regard to safety and confidentiality. A country label or a single negative report should not substitute for a careful assessment of the specific supply chain and available evidence.

Verify controls and claims

Ask suppliers to explain their policies, due-diligence process, grievance channels, record keeping and response to identified problems. Request evidence that relates to the material and transaction rather than a generic brochure. Confirm the issuer, scope, date and limitations of any certificate, audit, declaration or chain-of-custody record. A valid document can still cover only part of a supply chain or an earlier period.

Where independent review is appropriate, agree its scope, competence, access and reporting arrangements in advance. Check whether the review covered the relevant facility, material, date and risk. Keep records of questions and findings. Avoid asking a reviewer to certify matters outside their expertise or to guarantee that a complex supply chain has no risk.

Respond to identified concerns

A risk finding should lead to a decision and documented action. Depending on severity and the circumstances, an organisation may seek additional evidence, require a corrective action plan, increase monitoring, suspend a source or disengage. The response should consider whether leverage can be used to improve conditions, whether harm is ongoing and what responsibilities arise under applicable rules.

Set clear actions, owners, dates and measures for follow-up. A promise to improve is not evidence that improvement occurred. Review progress through records, competent assessments and appropriate stakeholder input. If the supplier cannot or will not address a material concern, escalate the decision to the responsible governance team and obtain legal advice.

Preserve useful records

Keep a proportionate record of the supply-chain map, evidence reviewed, risk reasoning, decision, corrective actions and review dates. Protect commercially sensitive information and personal data, and limit access to people who need it. Records should let another qualified reviewer understand why the organisation proceeded, what conditions it set and how it followed up.

Be precise in external statements. Say what was assessed, when, under which framework and what limitations remain. Do not describe a supplier as fully responsible or conflict-free because one document was received. Clear wording protects the credibility of public reporting and leaves room to disclose new information as it becomes available.

Review when the facts change

Revisit the assessment when origin, ownership, facility, intermediary, transport route, material, law or business relationship changes. A new risk signal, complaint or inconsistent document may also require review. Assign someone to monitor those triggers and keep the supplier’s contact and reporting process current.

Responsible sourcing is strongest when commercial decisions and risk management are connected. Procurement teams need a route to pause an order, seek advice and escalate concerns without losing important records. A risk-based process does not promise that every issue will be prevented; it makes the organisation more capable of recognising issues, responding proportionately and explaining its decisions.

Further reading

• OECD Due Diligence Guidance for Responsible Mineral Supply Chains
• Extractive Industries Transparency Initiative Standard
• IFC Sustainability Framework