KYS (Know Your Supplier): What are the obligations for businesses?

The KYS is the acronym for”Know Your Supplier“or”Know Your Supplier“in French. It is a crucial process for businesses to assess and manage the risks associated with their suppliers. It involves the collection, analysis, and verifying information on these companies in order to guarantee their legal, ethical and operational compliance.

What is the KYS?

KYS is a practice of due diligence. It allows businesses to better understand their suppliers, their business practices, and the potential risks associated with their businesses. By developing a thorough knowledge of the environment, companies can strengthen their resilience and their control of professional risks. This is how they develop their operational performance.KYS is not only of general interest, it is in fact a legal obligation businesses. In order to fight corruption and money laundering, the institutions have put in place regulatory standards of KYC, KYE, and KYS. Associated with these verifications are alert systems, regular audits and a Sanctions Committee in case of non-compliance.

Importance of KYS for businesses

The KYS is of crucial importance for businesses. Especially in a context where supply chains are increasingly complex and globalized. Here are a few reasons why the KYS is essential:

Risk Management:

By identifying and assessing the risks associated with their suppliers, businesses can anticipate and mitigate potential threats. These are in particular linked to the tampering, at the corruption, to human rights violations, for non-compliance with the standards of health And of the safety at work, and to environmental damage.

Regulatory compliance:

Businesses are subject to strict regulations in terms of compliance. This is particularly noticeable in areas such as the fight against corruption, human rights and environmental protection. The KYS allows businesses to bring into compliance in response to legal obligations, but not only that. It also makes it possible to avoid financial sanctions (and sometimes Penal), and thus to reduce the risks of Decrease in reputation.

Reputation protection:

Businesses should protect their reputation and their brand. By ensuring that their suppliers respect ethical and social standards high, they can avoid scandals. Such scandals could damage their image and their credibility with customers, investors and the general public.

Improving relationships with stakeholders:

By adopting responsible procurement practices, businesses can strengthen relationships with stakeholders. This includes customers, investors, regulators, and local communities. In short, KYS represents much more than just a red tape for businesses. It is an essential part of their risk management strategy, of their commitment to corporate social responsibility (CSR) and their values environmental.

KYS regulatory framework

International regulatory framework

The KYS is governed by various regulations and international standards aimed at promoting transparency, accountability and compliance in business relationships. These regulations include:

• ISO standards (International Organization for Standardization). Such as the ISO 37001 standard on anti-bribery management systems. They provide guidelines for establishing and maintaining effective anti-corruption practices.
• International conventions: In particular the United Nations Convention against Corruption (UNCAC). These set global standards for the prevention, enforcement, and international cooperation in the area of corruption.
• Sectoral initiatives: for example the Global Reporting Initiative (GRI) and the Sustainable Apparel Coalition (SAC). They encourage businesses to report transparently on their supplier management practices and sustainability performance.

Specific requirements in some jurisdictions

In addition to international regulations, many national jurisdictions have put in place their own laws and regulations relating to KYS. Some of the most notable examples include:

• Sapin II law in France, which requires French companies to set up compliance programs. These help prevent and detect the risks of corruption, including in their relationships with suppliers.
• The law on the duty of vigilance in France as well. It requires large companies to establish and implement a Vigilance plan. The aim of this is to prevent attacks on human rights and to The environment in their supply chains.

Sapin II law: fight against corruption

The Sapin II law was adopted in France in November 2016. It aims to strengthen the fight against corruption And the Influencer trafficking. It concerns French companies, as well as French subsidiaries of foreign groups. These entities must set up preventive measures and the detection of corruption, especially in their relationships with suppliers.The Sapin II law in terms of KYS includes a large number of provisions. Among these, we find the obligation for companies to set up compliance programs. This includes procedures for verifying suppliers and third parties, as well as mechanisms for reporting suspicious practices.

Law on the duty of care: corporate social responsibility

La Duty of Care Act was adopted in France in March 2017. It aims to strengthen the social and environmental responsibility businesses. This is especially true in their global supply chains. It requires large French companies with more than 5,000 employees (or more than 10,000 employees for international groups) to establish and implement a vigilance plan. The latter wants to prevent violations of human rights, social rights and the environment in their activities and those of their suppliers. Vigilance plan should include measures of due diligence with respect to suppliers, in particular with regard to The identification and risk assessment violations of human rights and the environment, as well as the mechanisms of tracking And of Reporting regular on the implementation of the plan.

The steps of the KYS process for suppliers

Identifying suppliers

The first step in the process of KYS consists of pinpoint and potential suppliers. This authentication can be done through market research. But also, thanks to the recommendations of other companies or partners. Another method is to use online platforms that specialize in connecting buyers and suppliers.

Information Gathering

The next step is to collate detailed information about them. This may include information such as their Company name, their address, their tax identification number, their certifications and licenses. But also the information on their corporate governance, their substructure of property and their business practices.Information can be collected from a variety of sources. For example: commercial databases, public registers, annual reports, and information provided directly by suppliers.

It is also possible to call on companies specialized in verifying corporate documents like Datakeen.

Risk assessment

Once the information is collected, it is important toassess risks associated with each supplier. This may include identifying the risks of corruption, of tampering, of non-compliance with social and environmental standards. As well as other potential risks associated with repute And at the conformity.Risk assessment can be done using a variety of tools and methods. For example, due diligence questionnaires, of financial analyses, of background checks And business practice assessments.

Datakeen helps you assess the risks of your suppliers.

Ongoing monitoring and management

Finally, it is essential to set up a monitoring system and ongoing management to ensure their continued compliance. This happens after suppliers have been identified, information has been collected, and risks have been assessed. This step may include monitoring suppliers regularly and updating information. But also, the conduct ofaudits And of IInspectionsregular, as well as the implementation of corrective measures in case of non-compliance.

Tools and technologies to facilitate the KYS process

KYS specialized software solutions

Businesses can use software solutions that specialize in supplier control to facilitate and automate KYS process. These solutions generally offer features such as collection and business data verification. When retrieving data, some allow the calculation of risks and the report generation.By using software tools, businesses can streamline the process of collecting and analyzing supplier information. They thus reduce the human errors and improve the effectiveness of their compliance programs.

Use of Artificial Intelligence in the KYS

Artificial Intelligence (AI) also offers promising opportunities to improve the KYS process. Businesses can use machine learning algorithms to analyze large amounts of data. It is thus possible and detect patterns and anomalies that could indicate potential risks. For example, AI can be used to analyze financial transactions, monitor social media and news, and identify suspicious behavior or practices among suppliers. This allows businesses to identify risks more quickly and take preventive measures.

Case studies: examples of businesses and their approaches to KYS

Businesses that have implemented best practices

Several companies have set up exemplary KYS programs. They demonstrate the importance and benefits of a proactive approach in terms of supplier management. Among these companies are world leaders in various sectors, such as manufacturing, technology, finance, and consumer goods. For example, a leading technology company has developed a sophisticated supplier management system. It includes tools for real-time monitoring And alert mechanisms to detect the potential risks as soon as they happen. Thanks to this proactive approach, the company was able to reduce incidents of non-compliance and improve its reputation with stakeholders.

Consequences for companies that have neglected the KYS

On the other hand, companies that neglect the KYS run the risk of suffering serious consequences. These can be fines, of disputes, of financial losses and damage to their repute. Several companies have faced scandals and regulatory inquiries due to questionable business practices by their suppliers. This has resulted in considerable financial losses and irreparable damage to their brand image. For example, a clothing manufacturing company has faced accusations of child labour in its supply chain. These accusations caused product boycotts, lawsuits, and a significant drop in its sales. These consequences could have been avoided if the company had put in place appropriate controls to assess and manage the risks associated with its suppliers.

Best practices for implementing an effective KYS program

Management involvement

One of the first best practices for implementing an effective KYS program is the active involvement of management. The company's senior management should support and promote initiatives supplier compliance. These initiatives require adequate resources and clear goals for the program. Management should also communicate regularly about the importance of the KYS. But also on the compliance expectations of suppliers at all levels of the organization. The aim here is to ensure greater ownership and accountability.

Employee training

Another good practice is to provide adequate training to employees involved in the KYS process. This doesn't just include procurement and compliance teams. But also the operations managers, of finances And RH who may be required to work with suppliers.Training should cover topics such as:

• Applicable regulations
• Internal company policies and procedures
• All the tools and technologies used for the KYS
• As well as best practices in due diligence and risk management

Collaboration with suppliers

Finally, close collaboration with suppliers is essential for the success of the KYS program. Businesses need to work in partnership with their suppliers to ensure that they understand and meet compliance requirements. The company should help them improve their business practices if needed. This may involve organizing meetings regular meetings with suppliers to discuss compliance expectations Provide educational resources and trainings maybe another method. As well as the establishment of monitoring mechanisms and Reporting to assess suppliers' compliance performance.

Conclusion

Summary of key points

The process of Know Your Supplier (KYS) has become an essential practice for businesses that want to effectively manage the risks associated with their suppliers. By actively identifying, evaluating, and monitoring suppliers, businesses can strengthen regulatory compliance, protect their reputation, and improve operational performance.In this article, we looked at the importance of KYS for businesses, as well as the international and domestic regulatory framework that frames this practice. We also explored the steps in the KYS process, the tools and technologies available, and best practices for effective implementation.