Skip to content

Evidence request lists

UK Modern Slavery Act 2015

Evidence request list. 9 controls, 9 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 12 September 2026. Published by The Art of Service.

Continuous Improvement

UKMSA-5
Continuous Improvement, Liaison, Reporting

Per MSA: Continuous Improvement Year-On-Year + Liaison with Law Enforcement + Independent Anti-Slavery Commissioner + Public Sector Section 54 Plus + Adjacent Legislation Interaction.

Artefacts an auditor will ask for
  • MSA evidence for UKMSA-5
Where this commonly fails
  • statement + DD + cascade partial

Risk

UKMSA-2
Risk Assessment and Due Diligence

Per MSA: risk assessment across business + supply chain + due diligence on suppliers + high-risk geographies.

Artefacts an auditor will ask for
  • MSA evidence for UKMSA-2
Where this commonly fails
  • statement + DD + cascade partial

Section 54: Transparency in Supply Chains

s.54(1)
Annual Slavery and Human Trafficking Statement

Commercial organisations with turnover of 36 million GBP or more must publish an annual statement on slavery and human trafficking.

Artefacts an auditor will ask for
  • Modern slavery statement approved by board
  • Supplier code of conduct
  • Risk assessment by category and geography
  • Audit and remediation records
Where this commonly fails
  • Statement lacks measurable KPIs
  • Tier two and below suppliers not assessed
  • Audit findings closed without remediation evidence
  • Worker grievance mechanism absent
s.54(4)
Board Approval and Signature

The statement must be approved by the board of directors and signed by a director.

Artefacts an auditor will ask for
  • Governance charter or terms of reference
  • Meeting minutes with decisions logged
  • Accountability matrix mapping owners
  • Reporting pack to board or committee
Where this commonly fails
  • Decisions made but not minuted
  • Owners listed but not empowered
  • Reporting pack lacks risk metrics
  • Tone from the top not evidenced
s.54(5)
Statement Content Requirements

Statement may include information about organisational structure, policies, due diligence, risk assessment, training, and effectiveness measures.

Artefacts an auditor will ask for
  • Documented procedure addressing statement content requirements
  • Evidence of executive or risk owner approval
  • Operational records demonstrating execution
  • Independent assurance or review report
Where this commonly fails
  • Procedure exists but execution inconsistent
  • Owner accountability not codified
  • Review cadence missed or undocumented
  • Coverage gaps for in scope entities or systems
s.54(7)
Publication on Website

If the organisation has a website, the statement must be published with a prominent homepage link.

Artefacts an auditor will ask for
  • Construction phase plan
  • Designers risk assessments and pre construction information
  • Site induction and toolbox talk records
  • Accident and near miss register
Where this commonly fails
  • Construction phase plan not site specific
  • Designers risks not communicated to contractors
  • Welfare facilities deficient
  • Near miss culture weak

Statement

UKMSA-1
Section 54 Statement, Board Approval

Per UK Modern Slavery Act Section 54: annual Slavery and Human Trafficking Statement + Board approval + publication on website.

Artefacts an auditor will ask for
  • MSA evidence for UKMSA-1
Where this commonly fails
  • statement + DD + cascade partial

Supplier Management

UKMSA-3
Contractual Cascade and Supplier Management

Per MSA + best practice: Contractual Cascade to Suppliers + flow-down + supplier audits + remediation.

Artefacts an auditor will ask for
  • MSA evidence for UKMSA-3
Where this commonly fails
  • statement + DD + cascade partial

Training

UKMSA-4
Training, Awareness, Whistleblowing

Per MSA: training + awareness + whistleblowing + grievance mechanisms.

Artefacts an auditor will ask for
  • MSA evidence for UKMSA-4
Where this commonly fails
  • statement + DD + cascade partial
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does.