Overview
This article explains how to carry out the concrete risk analysis in the Tacto App for suppliers with a medium or high risk.
Prerequisite: The abstract risk analysis is complete and the supplier still has a score below 80.
The assessment covers country and industry risk, appropriateness, mitigation factors such as certificates, the supplier's self-assessment and your individual assessment.
Note: Evaluation templates, score formulas, score thresholds and table views are configured per customer. The names, weightings and thresholds mentioned here describe Tacto's standard configuration – your template may differ.
Basics
A supplier's concrete score corresponds to the lowest result of the three legal positions:
Human rights
Labour rights (occupational safety)
Environmental rights
The risk model combines measurable location and industry risk factors and derives the risk for each legal position from them. The maximum score is 100 points; the higher the score, the lower the risk.
You carry out a separate Evaluation for each legal position with a score below 80.
If a legal position already has a score of 80 or higher, no Evaluation is required for it.
Progress remains "In progress" until all legal positions below 80 have been evaluated.
How to carry out the concrete risk analysis
1. Find suppliers in the table view
In the Suppliers module, open the table view for the concrete risk analysis (in the standard configuration "Concrete risk analysis"). It shows all suppliers that require a concrete risk analysis:
Pre-imported concrete score: < 80
Risk status: high or medium risk
Progress: In progress
2. Create an Evaluation per legal position
Right-click the supplier's name or open the action menu in the row.
Select Create new Evaluation.
Under Select Evaluation template, choose the template of the affected legal position with a score below 80, for example "Human rights".
Click Create Evaluation.
Note: In the standard configuration, further sections are only displayed as long as the score is below 80 during the Evaluation.
3. Section 1: Imported score of the legal position
The first section shows the score of the legal position resulting from country and industry risk.
4. Section 2: Appropriateness
In the standard configuration, appropriateness is assessed using four equally weighted criteria:
Severity, probability of occurrence and irreversibility (25%)
Type of business activity (25%)
Contribution to causation (25%)
Influence factors (25%)
Your answers result in a factor between 0.5 and 1.5 that is applied to the score. If the score is then 80 or higher, no further sections are displayed and the analysis is complete.
5. Section 3: Mitigation factors
If the score is still below 80, information on risk mitigation is requested, for example certificates. Certificates already stored in the supplier's Documents tab are taken into account automatically.
6. Section 4: Supplier self-assessment
If the risk remains elevated, request a self-assessment from the supplier. Use the questionnaire stored as a Request form (Settings → Forms).
Save the Evaluation with Save only.
In the Evaluation's side panel, click Create assessment, select the questionnaire and send the Request to the supplier.
Once the supplier has responded, reopen the Evaluation and continue. In the standard configuration, the supplier's answers are transferred to the Evaluation automatically.
The questionnaire distinguishes between questions that uncover violations and questions about internal processes. A reported violation leads directly to a score of 0.
7. Section 5: Individual assessment of the risk profile
Finally, you can assess the supplier's risk profile individually, regardless of the previous score.
If the score is still below 80, the supplier is considered at risk and, in the standard configuration, appears in the table view for preventive measures.
If your assessment is negative and there is a concrete suspicion, the supplier appears in the table view for remedial measures.
8. Conclude the Evaluation
Click Conclude Evaluation and confirm in the dialog.
Next steps: define measures
After the abstract and concrete risk analysis, you know the risk profile of your supply chain. The LkSG requires you to define preventive and remedial measures for identified risks.
Create measures as Tasks: in the Evaluation's Tasks side panel or in the supplier profile's Tasks tab via Create Task.
For more information, see Preventive measures and Remedial measures.