Due Diligence
What is Due Diligence?
The investigation or audit of a potential investment, partner, or vendor to confirm facts and assess risks. In compliance, often refers to vendor risk assessment.
Terms that appear alongside due diligence
Each of these is named in at least one of the same controls as due diligence. The number is how many controls name both.
- compliance 53 shared controls
- audit 50 shared controls
- governance 32 shared controls
- policy 30 shared controls
- cybersecurity 28 shared controls
- breach notification 26 shared controls
- gdpr 26 shared controls
- remediation 24 shared controls
Frameworks that govern due diligence
What the standards actually require on due diligence
Requirements naming due diligence across 6 standards, quoted from the control text.
Management conducts due diligence before selecting a third party, in proportion to the risk and complexity of the activity, assessing the third party's ability to perform, adhere to the entity's policies and comply with law, and where a third party cannot supp...
ffiec-it-examination-handbook::DAM-IV.P.2 · IV.P.2 Due Diligence and Third-Party Selection (Development, Acquisition, and Maintenance) →The company must report annually on its due diligence (or integrate it into its sustainability report), covering its policy and that it has been assessed, the management structure, the system for gathering red flag information and how it strengthened due dilig...
responsible-minerals-initiative-rmi-responsible-minerals-assurance-process::A-5 · All Minerals Step 5: annual public due diligence report and audit summary →Article 12(5): operators keep all documentation related to due diligence, including records, measures and procedures under Article 8, for at least five years and make it available to authorities on request.
regulation-eu-20231115-on-deforestation-free-supply-chains::12(5) · Keep all due diligence documentation for at least five years →For anyone hired or engaged in a role that touches the AML/CTF obligations, the policies must require an assessment, at the start and periodically afterwards, of whether the person has the capability their AML/CTF responsibilities demand and whether they are t...
aml-ctf-rules-2025-australia::R5-8 · Personnel due diligence: skills, knowledge, expertise and integrity, before and during engagement →Respecting human rights places on an organization a responsibility to carry out due diligence so that it finds, prevents and deals with the human rights effects, actual or potential, of its own activities or of those it has relationships with.
iso-26000-2010::6.3.3 · 6.3.3 Human rights issue 1: Due diligence →Include AI adverse impact risks in portfolio risk assessments and investment analysis; engage stakeholders to identify investee risks; raise concerns with investees and request information and action, including a rationale for adopting AI systems;
oecd-due-diligence-guidance-for-responsible-ai-2026::B2.16 · B2.16 Due diligence by investors and financial institutions in AI →Questions people ask about due diligence
What is Due Diligence?
Why is Due Diligence important for compliance?
Which compliance frameworks address Due Diligence?
Where can I learn more about Due Diligence?
See how Due Diligence applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.