On pages 7 & 8 it is outlined that the company is conducting auditing, supply chain mapping and implementing a global risk matrix, though little information is given for what this risk matrix looks like. Page 8 outlines that Boohoo has set up a Supply Chain Compliance Committee and a Risk Committee.
I have unchecked conducting desk research as it is unclear how the company assesses risk beyond the global risk matrix. However, I have changed the answer from Use of tool because the company states "We are also developing a global risk matrix" (p. 8) and thus has not yet been implemented.