Human rights risk mapping
For organisations seeking to conduct effective human rights due diligence – whether to meet regulatory expectations such as the Corporate Sustainability Due Diligence Directive (CSDDD), respond to investor scrutiny, manage ethical and reputational risk, or operate as a responsible and values-driven business – human rights risk mapping is a critical first step.
GoodCorporation’s approach to human rights risk mapping
GoodCorporation supports organisations to identify, assess and prioritise potential and actual human rights risks across operations, projects and value chains. Our approach is grounded in best practice and focuses on where the most severe risks to people are likely to occur.
We tailor each engagement to the organisation’s starting point, including the maturity of its existing programme, team, and internal data, with continuous improvement in mind, ensuring that our recommendations are practical and implementable.
Our risk mapping approach is defined by:
An independent, risk‑based methodology aligned with The UN Guiding Principles on Business and Human Rights (UNGPs)
Global, cross‑sector experience across complex value chains
A focus on risks to people, not just proximity in the supply chain
Practical outputs, including heat maps, risk registers, prioritisation matrices and operational roadmaps for action
Integration with wider assessment, training and advisory services
The output is a practical, prioritised human rights risk map that helps organisations allocate resources where they are most needed and provides the foundation for an effective human rights risk management strategy.
Read our related case study
Learn how GoodCorporation used risk mapping to assess human rights impacts for a leading global drinks brand.
Why human rights risk mapping matters
An effective human rights risk mapping exercise enables organisations to:
Identify salient human rights risks before harm occurs
Support ESG and sustainability reporting
Set clear priorities to guide risk mitigation over time, focusing resources on the most severe and likely risks to people
Build confidence with investors, customers and other stakeholders
Strengthen internal governance and oversight by providing a clear, evidence‑based view of human rights risks
Prioritise risks based on severity and likelihood to move from broad commitments to targeted, meaningful action.
Meet expectations under the UN Guiding Principles on Business and Human Rights (UNGPs) and establish a clear baseline for compliance with evolving regulatory requirements grounded in the UNGPs, including the CSDDD
Drive continuous improvement by regularly updating risk maps, tracking mitigation progress, reviewing effectiveness, and embedding findings into reporting to keep insights relevant and actionable
What parts of the business should be included in a risk mapping exercise?
Organisations can map human rights risks at different levels, whether across the entire group, within specific operations or business units, or in targeted parts of the value chain or supply chain. The scope should reflect the unique characteristics of different geographies, operations and business functions.
Our team works with organisations to define the right scope, ensuring the exercise is both practical and aligned with the organisation’s priorities and regulatory expectations.
discover the right scope for your organisationA key step in the human rights due diligence process
Human rights risk mapping provides the foundation for an effective human rights due diligence programme.
It creates an evidence base that informs:
The scope of further assessments or investigations by highlighting which parts of the business, operations or value chain present higher risks and may require deeper analysis
The design of targeted actions to prevent, mitigate or remediate identified risks, such as policies, controls and training focused on areas of greatest potential harm
Ongoing monitoring by establishing a baseline against which changes in risk exposure can be tracked over time
Business decision‑making by supporting the integration of human rights considerations into the lifecycle of products and services
ESG and sustainability reporting
GoodCorporation can support organisations across each of these stages. Importantly, human rights risk mapping is not a one‑off exercise.
As due diligence systems mature, risk mapping should be revisited and refined to reflect changes in operations, suppliers, external context and quality of available data.
Find out how risk mapping can support your human rights due diligenceRelated news and insights
GoodBlog
How sustainability risk mapping adds value to your businessÂ
The business case for sustainability risk mapping is simple. By identifying and managing potential environmental,...
GoodBlog
Navigating human rights challenges in global supply chains: strategies for long-term sustainability
With around 70% of international trade flowing through global value chains – where services, raw...
GoodBlog
Five steps to effective human rights risk assessment
Ten years on from the publication of the United Nations (UN) Guiding Principles on Business...
GoodBlog
A best-practice guide to conducting effective human rights due diligence
Large, complex supply chains are fraught with risk for many businesses, not least in the...
Frequently asked questions
What is human rights risk mapping?
Human rights risk mapping is a process for identifying and prioritising potential and actual human rights risks across a company’s operations and value chain. It helps organisations understand where the most severe risks to people are likely to occur and which issues should be addressed first.
Why do companies need human rights risk mapping?
Companies use human rights risk mapping to identify the highest risks associated with their business activities and to focus resources on mitigating these risks and preventing harm before it occurs. The exercise also supports organisations in meeting expectations under the UN Guiding Principles on Business and Human Rights, complying with emerging regulations such as the CSDDD, and responding to investor and stakeholder scrutiny.
What is the difference between human rights risk mapping and a human rights risk assessment?
There is no material difference between the two terms. Human rights risk mapping and human rights risk assessment are often used interchangeably to describe the process of identifying and prioritising risks to people associated with business activities.
Does human rights risk mapping only look at tier 1 suppliers?
No. Best practice human rights risk mapping focuses on where the most severe risks to people occur, wherever they sit in the value chain. This is essential for understanding supply chain human rights risks beyond direct business relationships.
How often should human rights risk mapping be updated?
Human rights risk mapping should be reviewed regularly and updated when operations, suppliers or operating contexts change. Keeping risk maps up to date supports effective human rights due diligence, ESG reporting and continuous improvement.
Speak to our human rights experts
Find out how GoodCorporation can help your organisation identify, prioritise and manage human rights risks across operations and value chains.
