Which suppliers require enhanced due diligence?

Tier by risk rather than screening everything to the same depth. Factors that lift a supplier above baseline: jurisdiction - operations, ownership or banking in a FATF grey- or black-listed country, a sanctioned jurisdiction, or a secrecy jurisdiction; sector - extractives, construction, garments and textiles, electronics, agriculture, labour hire and waste all carry documented forced-labour or corruption typologies; ownership opacity - nominee shareholders, layered holdings, trusts whose deeds have not been captured; state ownership or PEP involvement, which raises bribery and sanctions-ownership risk at the same time; contract value and criticality, since a sole-source supplier of a critical input carries operational as well as legal risk; and sub-tier depth, because a clean tier-1 supplier can subcontract into an unscreened tier 2. Record why each supplier was tiered where it was. A risk-based approach is only defensible if the reasoning was written down before the outcome was known.