Skip to content

Evidence request lists

Responsible Minerals Initiative (RMI) - Responsible Minerals Assurance Process

Evidence request list. 18 controls, 18 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 12 September 2026. Published by The Art of Service.

Audit

RMIRMA-4
Third-Party Audit and Conformance

Per RMAP: audit. Requirements include (a) third-party audit per RMAP standards + (b) corrective actions + (c) RMI conformant smelter/refiner status + (d) maintain audit findings.

Artefacts an auditor will ask for
  • RMAP evidence for RMIRMA-4
Where this commonly fails
  • due diligence + audit partial

Chain of Custody

RMIRMA-3
Chain of Custody, Documentation, Reporting

Per RMAP: chain of custody + reporting. Requirements include (a) chain of custody documentation + (b) supplier documentation + (c) annual reporting + (d) maintain records.

Artefacts an auditor will ask for
  • RMAP evidence for RMIRMA-3
Where this commonly fails
  • due diligence + audit partial

Management System

RMIRMA-1
Scope, Management System, Internal Transparency

Per RMI Responsible Minerals Assurance Process (RMAP): management system. Requirements include (a) Scope of Assurance + (b) Management System aligned to OECD Due Diligence Guidance + (c) Internal Systems of Transparency.

Artefacts an auditor will ask for
  • RMAP evidence for RMIRMA-1
Where this commonly fails
  • due diligence + audit partial

RMI: Assurance Process and Audit

RMI-RMAP-1
Smelter/Refiner Assessment

Independent third-party assessment of smelter/refiner management systems and sourcing practices

Artefacts an auditor will ask for
  • RMAP audit scope, plan and report
  • Risk-based audit selection criteria
  • Onsite audit checklists and corrective actions
  • Assessor independence and rotation records
Where this commonly fails
  • Audit scope omits new sourcing routes
  • Risk selection criteria not transparent
  • Corrective actions extended without root cause
  • Assessor rotation lapses on long engagements
RMI-RMAP-2
Risk-Based Audit Approach

Apply risk-based approach to validate smelters company-level management processes for responsible procurement

Artefacts an auditor will ask for
  • RMAP audit scope, plan and report
  • Risk-based audit selection criteria
  • Onsite audit checklists and corrective actions
  • Assessor independence and rotation records
Where this commonly fails
  • Audit scope omits new sourcing routes
  • Risk selection criteria not transparent
  • Corrective actions extended without root cause
  • Assessor rotation lapses on long engagements
RMI-RMAP-3
Onsite Audit Requirements

Conduct onsite audits taking 1-3 days per facility depending on complexity with annual renewal required

Artefacts an auditor will ask for
  • RMAP audit scope, plan and report
  • Risk-based audit selection criteria
  • Onsite audit checklists and corrective actions
  • Assessor independence and rotation records
Where this commonly fails
  • Audit scope omits new sourcing routes
  • Risk selection criteria not transparent
  • Corrective actions extended without root cause
  • Assessor rotation lapses on long engagements
RMI-RMAP-4
Assessor Oversight and Rotation

Rotate assessors every 3 years with RMI shadowing during onboarding and routinely each year

Artefacts an auditor will ask for
  • RMAP audit scope, plan and report
  • Risk-based audit selection criteria
  • Onsite audit checklists and corrective actions
  • Assessor independence and rotation records
Where this commonly fails
  • Audit scope omits new sourcing routes
  • Risk selection criteria not transparent
  • Corrective actions extended without root cause
  • Assessor rotation lapses on long engagements

RMI: Due Diligence Process

RMI-DD-1
Policy and Management Systems

Establish policies and management systems for responsible mineral sourcing aligned with OECD Guidance

Artefacts an auditor will ask for
  • Supply chain due diligence policy aligned to OECD guidance
  • Supplier survey results and risk scoring
  • Red flag escalation and resolution log
  • Public due diligence report
Where this commonly fails
  • Policy not aligned to OECD five-step framework
  • Supplier survey response rates low
  • Red flags closed without root cause analysis
  • Public report omits remediation outcomes
RMI-DD-2
Supply Chain Information Collection

Collect relevant supply chain information to conduct red flag review and risk assessment

Artefacts an auditor will ask for
  • Supply chain due diligence policy aligned to OECD guidance
  • Supplier survey results and risk scoring
  • Red flag escalation and resolution log
  • Public due diligence report
Where this commonly fails
  • Policy not aligned to OECD five-step framework
  • Supplier survey response rates low
  • Red flags closed without root cause analysis
  • Public report omits remediation outcomes
RMI-DD-3
Red Flag Review

Conduct red flag review based on supply chain information to identify potential risks per OECD Annex II

Artefacts an auditor will ask for
  • Supply chain due diligence policy aligned to OECD guidance
  • Supplier survey results and risk scoring
  • Red flag escalation and resolution log
  • Public due diligence report
Where this commonly fails
  • Policy not aligned to OECD five-step framework
  • Supplier survey response rates low
  • Red flags closed without root cause analysis
  • Public report omits remediation outcomes
RMI-DD-4
Due Diligence Reporting

Report on due diligence activities, findings, and remediation actions to stakeholders

Artefacts an auditor will ask for
  • Supply chain due diligence policy aligned to OECD guidance
  • Supplier survey results and risk scoring
  • Red flag escalation and resolution log
  • Public due diligence report
Where this commonly fails
  • Policy not aligned to OECD five-step framework
  • Supplier survey response rates low
  • Red flags closed without root cause analysis
  • Public report omits remediation outcomes

RMI: Mineral Standards

RMI-MS-1
Conflict Minerals (3TG) Standard

Standards for tin, tantalum, tungsten, and gold aligned with OECD Guidance Annex II risk indicators

Artefacts an auditor will ask for
  • Mineral scope determination and applicability log
  • Smelter or refiner identification list with CMRT/EMRT
  • Mineral-specific risk assessment outputs
  • Engagement records with upstream producers
Where this commonly fails
  • Scope omits emerging minerals (cobalt, mica)
  • Smelter list not reconciled to current RMI status
  • Risk assessments not updated for conflict zones
  • Upstream engagement limited to tier 1
RMI-MS-2
Cobalt Standard

Specific standard for cobalt supply chain due diligence and responsible sourcing

Artefacts an auditor will ask for
  • Mineral scope determination and applicability log
  • Smelter or refiner identification list with CMRT/EMRT
  • Mineral-specific risk assessment outputs
  • Engagement records with upstream producers
Where this commonly fails
  • Scope omits emerging minerals (cobalt, mica)
  • Smelter list not reconciled to current RMI status
  • Risk assessments not updated for conflict zones
  • Upstream engagement limited to tier 1
RMI-MS-3
All-Minerals Standard

Global Responsible Sourcing Due Diligence Standard applicable to all minerals not covered by mineral-specific RMAP

Artefacts an auditor will ask for
  • Mineral scope determination and applicability log
  • Smelter or refiner identification list with CMRT/EMRT
  • Mineral-specific risk assessment outputs
  • Engagement records with upstream producers
Where this commonly fails
  • Scope omits emerging minerals (cobalt, mica)
  • Smelter list not reconciled to current RMI status
  • Risk assessments not updated for conflict zones
  • Upstream engagement limited to tier 1

RMI: Social, Environmental and Governance Standards

RMI-SEG-1
Facility-Level Social Standards

Facility Standard addressing broader social risks including labor rights and community impacts

Artefacts an auditor will ask for
  • Facility-level social standards self assessment
  • Environmental management system records
  • OHS incident and near-miss log
  • Governance and ethics policy acknowledgements
Where this commonly fails
  • Self assessments not validated by independent review
  • EMS scope misses key emission sources
  • OHS incidents underreported at facility level
  • Governance training not refreshed for new managers
RMI-SEG-2
Environmental Standards

Environmental risk assessment and management requirements for smelting and refining facilities

Artefacts an auditor will ask for
  • Facility-level social standards self assessment
  • Environmental management system records
  • OHS incident and near-miss log
  • Governance and ethics policy acknowledgements
Where this commonly fails
  • Self assessments not validated by independent review
  • EMS scope misses key emission sources
  • OHS incidents underreported at facility level
  • Governance training not refreshed for new managers
RMI-SEG-3
OHS and Governance

Occupational health and safety and governance risk assessment requirements at the facility level

Artefacts an auditor will ask for
  • Facility-level social standards self assessment
  • Environmental management system records
  • OHS incident and near-miss log
  • Governance and ethics policy acknowledgements
Where this commonly fails
  • Self assessments not validated by independent review
  • EMS scope misses key emission sources
  • OHS incidents underreported at facility level
  • Governance training not refreshed for new managers

Risk

RMIRMA-2
Risk Identification and Mitigation

Per RMAP: risk. Requirements include (a) Risk Identification including high-risk circumstances + (b) Risk Mitigation including reasonable steps + (c) supply chain risk assessment.

Artefacts an auditor will ask for
  • RMAP evidence for RMIRMA-2
Where this commonly fails
  • due diligence + audit partial
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does. See the Responsible Minerals Initiative (RMI) - Responsible Minerals Assurance Process framework page.