I would say that they do undertake a risk assessment. They stated on page 4 that, as a general rule, they do not allow production with a factory until there is a third party audit. They also mention looking at review of existing audits and internet searches of negative issues with a factory.

pg. 4

“This due diligence process includes, where possible, the following inquires: a factory visit (if not possible eg during covid, detailed photographic and other evidence is required), a detailed Q&A process, an outline of our compliance requirements and run through of our Workplace Code of Conduct and related documentation, inspection of sample products, confirmation of compliance and audit history and satisfactory resolution of any issues, where possible a review of existing factory audits, review of other customers of the supplier and internet searched for any negative issues regarding the supplier.”