"Each risk and control committee (RCC) conducts an in-depth review on a regular basis of the risk profile of the relevant business unit, or of Headquarters" (pg 3). This is an example of self-reporting from Brambles.
Alongside this, "In 2016, all such lumber suppliers produced a Chain of Custody Certification" therefore, an example of independent audit from the suppliers of Brambles.