Under "Due diligence, existing policies, and risk assessments" the company broadly states their goals of risk assessment such as "identify and assess potential risk areas in our supply chain" however they do no detail any specific mechanisms.

The company does not mention any specific risk assessment methods.

pg. 1

"Organisations are subject to rigorous assessment and approval before we work with them."

"Our contractors and suppliers are reviewed on a regular basis. Our reviews include researching country of origin, their sector of activity, and the length of the business relationship — in order to assess the areas of highest risk for us. "