Risk-based prioritisation

Glossary · Business & human rights

Definition

Risk-based prioritisation in human rights due diligence is the disciplined ordering of assessment and action according to the severity of potential harm to people — and, where relevant, likelihood — rather than according to convenience, spend volume alone, or where data already happens to exist. It recognises that no organisation can assess every risk in every tier at the same depth at once, and that trying to do so often produces shallow coverage everywhere and meaningful action nowhere.

Why it matters for business

Practitioners face a familiar catch-22: you are told to focus where risks are most severe, yet you lack resource for a full assessment of everything that might be severe. Risk-based prioritisation is how UNGP-aligned HRDD resolves that tension. It uses the best available information — sector risk profiles, geography, process type, workforce characteristics, past incidents, purchasing patterns — to decide where deeper dive assessment and remediation effort should go first, while remaining ready to revise as evidence improves.

The critical difference from ordinary enterprise risk scoring is the primacy of people. A low-spend supplier category can still rank high if forced labour or severe safety risk is plausible. Conversely, a large strategic supplier may need attention for commercial reasons, but human rights prioritisation still asks what the severity picture is for workers, not only what the revenue exposure is for the brand.

When budget is the constraint, prioritisation becomes even more important. Spreading a thin audit budget evenly can miss the worst risks. Combining internal knowledge (where buyers already see red flags), credible external sources, and staged assessment allows under-resourced teams to make defensible choices and explain them to leadership. Documenting the rationale also matters when stakeholders ask why you acted here first.

Poor prioritisation often looks like activity: many questionnaires, few decisions. Strong prioritisation produces a short list of severe issues with owners, timelines and tracking — and an explicit plan for what is deferred and why. That honesty is part of effective HRDD, not a failure of ambition.

How Claire Lynch Consulting works with this

CLC’s In the Weeds series and HREDD advisory work speak directly to practitioners who must prioritise under resource pressure. We help organisations design risk assessment and prioritisation approaches that leadership can understand and that stay centred on severity for people. Training builds the shared language cross-functional teams need to make those trade-offs without defaulting to “audit everyone lightly.”