A Red Flag Is Not an Outcome

What remedy and stakeholder engagement add to human rights risk screening

After building a free supplier risk screener, I kept returning to a harder question: what should happen after the tool flags a supplier?

A red risk tier is not an outcome. It does not repay unpaid wages, return a passport, stop harassment, or protect a worker who speaks up.

The screener helps buyers identify which suppliers may require closer attention. It brings together enforcement records, adverse media, contextual risks, and other evidence.

Every High or Critical result requires human review. The screener is a prioritization tool, not a termination tool.

Finding risk is only the first half of the problem. What happens after a risk is found is a question of remedy, participation, and justice.

A Grievance Mechanism Is More Than a Suggestion Box

An operational grievance mechanism is a process through which workers, communities, and other affected people can raise concerns and seek resolution.

It can help a company detect harm early, but it is not the remedy itself. It is one possible pathway through which remedy can be requested, agreed, and monitored.

Many companies believe that a suggestion box, hotline, or written policy is enough. It is not.

A locked box that nobody trusts, a hotline that reaches voicemail, or a policy that workers cannot read may exist on paper while failing completely in practice.

A credible mechanism must also protect the people who use it. Anonymous reporting, protection against retaliation, local language access, and channels outside the normal management line may all be necessary.

Workers must remain free to approach their union, a regulator, a court, or another legitimate process. An internal grievance mechanism should never take those options away.

The Eight Tests of an Effective Mechanism

Principle 31 of the United Nations Guiding Principles on Business and Human Rights sets eight effectiveness criteria.

These criteria are not optional features. Together, they separate a working grievance mechanism from a suggestion box.

1. Legitimate

The intended users trust the mechanism. Those responsible for it are accountable for conducting the process fairly.

2. Accessible

People know the mechanism exists and can use it despite barriers involving language, literacy, disability, cost, technology, or fear of retaliation.

3. Predictable

The process has clear stages, timeframes, possible outcomes, and methods for monitoring whether an agreement was implemented.

4. Equitable

Affected people can obtain the information, advice, representation, and expertise needed to participate on fair terms.

5. Transparent

Complainants receive updates about their cases. The organization also publishes enough information to demonstrate whether the mechanism is working.

6. Rights-compatible

Outcomes and remedies align with internationally recognized human rights. The cheapest solution for the company is not automatically an adequate remedy.

7. Continuous learning

Cases are analyzed for patterns. What the company learns should improve its controls and help prevent the same harm from happening again.

8. Based on dialogue

Intended users help design and improve the mechanism. Dialogue with affected people is prioritized when grievances are investigated and resolved.

A mechanism can look impressive while still failing one or more of these tests. Its effectiveness should be judged by the people expected to use it, not only by the company operating it.

Remedy Addresses Harm. Engagement Shapes the Response.

Remedy is broader than rehabilitation. Depending on the harm, it can include restitution, compensation, back pay, reinstatement, an apology, medical support, or guarantees that the harm will not happen again.

Stakeholder engagement also has a broader role than prevention.

It should help a company identify risks, design preventive measures, investigate complaints, agree appropriate remedies, and determine whether those remedies worked.

A grievance pathway might move through eight stages: receive, acknowledge, triage, investigate, remedy, appeal, close with the complainant’s confirmation, and learn.

Consider an illustrative example.

A worker reports anonymously that a labour broker is holding passports and charging recruitment fees. The complaint is logged, acknowledged, and treated as a potentially severe case.

Immediate protection comes first. Passports should be returned, and workers should be protected from retaliation while the investigation continues.

If the allegations are confirmed, remedy may include returning recruitment fees, paying money owed, ending abusive broker practices, and guaranteeing that workers will not face retaliation.

But the process should not end with compensation.

Recruitment controls must also change. Otherwise, the individual case may close while the underlying risk remains open.

This is where engagement matters. Workers and their representatives should help determine whether the proposed remedy matches the harm and whether the new controls work in practice.

From Informing People to Sharing Decisions

Not every activity described as stakeholder engagement gives affected people the same degree of influence.

The International Association for Public Participation spectrum offers a useful five-level model.

1. Inform

The company explains what is happening. Communication is one-way, and affected people do not shape the decision.

2. Consult

The company asks for views and feedback, but it retains control over the final decision.

3. Involve

Affected people participate while options remain open. Their concerns and ideas can change the proposed plan.

4. Collaborate

The company and affected people develop options or decisions together through joint committees, monitoring, or remediation plans.

5. Empower/FPIC

The final decision is placed with the affected group.

The appropriate level depends on the decision, the severity of the potential impact, and the rights of the people affected.

Free, prior and informed consent requires separate attention. It is not simply a stronger name for ordinary consultation or a generic engagement level for every stakeholder.

It is a distinct rights standard concerning Indigenous and tribal peoples in relevant circumstances.

The United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP) and International Labour Organization (ILO) Convention №169 provide its foundations.

Consent must be sought before the relevant decision is made, without pressure, with adequate information, and through the representative institutions of the people concerned.

Engagement becomes meaningful only when it can influence a decision. A consultation held after the company has already decided is communication, not participation.

Closing the Loop

Screening, engagement, and remedy should form one continuous loop.

Screening directs attention towards possible risks. Engagement brings affected people into the investigation and response. Remedy asks whether the harm was repaired and whether recurrence was prevented.

The evidence produced through that process should then improve future screening.

A cluster of grievances at one supplier may reveal a pattern that no single complaint shows. It should trigger closer examination rather than being averaged into administrative noise.

In my model, whether a supplier has a documented grievance mechanism is an important risk feature. It also affects how quickly an old severe finding may carry less weight after time and evidence of remediation.

Time alone should not erase a supplier’s history. Without a credible worker voice channel, there may be no reliable way to know whether conditions actually changed.

The same principle should apply to the screener itself. Workers, suppliers, and civil society organizations should be able to question its evidence and challenge an incorrect result.

A screening tool that cannot be questioned risks recreating the suggestion-box problem in digital form.

I have now added a Remedy and Engagement page to the Supplier Risk Model.

The page explains the eight effectiveness criteria, a pathway from receiving a complaint to organizational learning, and five levels of stakeholder engagement.

It is guidance and disclosure, not a live complaints portal. It cannot provide remedy or replace the grievance channels, protections, investigations, and remedies that companies must operate themselves.

Screening tells a company where to look. Remedy determines whether looking made any difference to the person who was harmed.

If you want to do further discussion, please feel free to send email: psompong.biz@gmail.com