Due Diligence
What is Due Diligence?
The investigation or audit of a potential investment, partner, or vendor to confirm facts and assess risks. In compliance, often refers to vendor risk assessment.
Terms that appear alongside due diligence
Each of these is named in at least one of the same controls as due diligence. The number is how many controls name both.
- compliance 53 shared controls
- audit 50 shared controls
- governance 32 shared controls
- policy 30 shared controls
- cybersecurity 28 shared controls
- breach notification 26 shared controls
- gdpr 26 shared controls
- remediation 24 shared controls
Frameworks that govern due diligence
What the standards actually require on due diligence
Requirements naming due diligence across 6 standards, quoted from the control text.
LkSG status + EU CSDDD coordination + 2024-2025 pipeline. STATUS: LkSG in force since 1 January 2023 (>3,000 employees) + 1 January 2024 (>1,000 employees);
LkSG-EU-CSDDD-Coordination-Status · EU Corporate Sustainability Due Diligence Directive (CSDDD) Coordination + LkSG 2024-2025 Status →Part B sets out applicable customer identification procedures including verification methods.
AMLCTF-PART-B · AML/CTF Program Part B (Customer Due Diligence) →Foreign correspondent accounts shall undergo enhanced due diligence including assessing AML controls of the respondent bank.
BSA-AML-17 · Correspondent Account Due Diligence →Recommendation 10 (Customer Due Diligence / CDD): financial institutions should be required to undertake CDD measures: (a) identifying the customer + verifying that customer's identity using reliable + independent source documents + data + information;
FATF-R.10_11 · Customer Due Diligence + Record Keeping (FATF R.10 and R.11) →Sapin II Pillar 4 - Third-Party Due Diligence (Evaluations integrite des tiers). REQUIREMENTS: a risk-based due-diligence procedure for THIRD PARTIES including: (a) CLIENTS (especially government clients + politically-exposed persons + high-risk jurisdictions)...
Sapin2-Pillar4-ThirdParty-DueDiligence · Pillar 4 - Third-Party Due Diligence (Clients, Suppliers, Intermediaries, M&A) →Principle 3 Human Rights: respect human rights and the interests + cultures + customs + values of employees and communities affected by our activities.
ICMM-MP-P3-P4-HumanRights-RiskMgmt-UNGP-DueDiligence · ICMM Mining Principles 3 + 4 - Human Rights (UNGPs Alignment) + Risk Management + Due Diligence →Questions people ask about due diligence
What is Due Diligence?
Why is Due Diligence important for compliance?
Which compliance frameworks address Due Diligence?
Where can I learn more about Due Diligence?
See how Due Diligence applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.