Extract from Oliver Harvey’s article “Finding Contracts in the Wild: A Good Start for Managing ESG and Other Third-Party Risks”
The Covid pandemic has shown many organizations how much they rely on third parties in their supply-chains, to help them deliver services and products to customers. At the same time, the growth in environmental, social and governance (ESG) concerns has forced many organizations to re-visit the commercial relationships they have with third parties whose behaviors may create risks for the organizations’ ESG goals and commitments.
Deloitte recently surveyed the third-party risk management practices of over 1000 organizations in more than 30 countries. It found that since COVID-19 became a global pandemic on 11 March 2020, just over half (51%) of respondents faced one or more third-party risk incidents. These incidents created regulatory, reputational or strategic issues for respondents in areas such as:
- Cybersecurity and privacy issues in third parties
- Failure by third parties to meet their contractual obligations to those organizations
- ESG issues in third parties, such as environmental pollution, modern slavery, bribery and corruption.
Unsurprisingly, the experiences of the past 24 months have also sharpened regulators’ interest in businesses’ arrangements with their third-party vendors.