Part 4 Business Ethics Sedex Supplier Workbook
Part 4 Business Ethics Sedex Supplier Workbook
Part 4 Business Ethics Sedex Supplier Workbook
PART 4:
BUSINESS ETHICS
SEDEX BACKGROUND VERITÉ BACKGROUND
Sedex Information Exchange is a unique and Verité is an international not-for-profit consulting,
innovative platform, helping companies to training, and research organisation that has been
manage ethical supply chain risk and streamline a leader in supply chain social responsibility and
the challenging process of engaging with multi- sustainability since 1995. Verité’s holistic
tier supply chains. approach is based on an extensive, applied
understanding of common obstacles and effective
As the largest collaborative platform for managing strategies for managing supply chain
ethical supply chain data, Sedex engages with all risks. Verité’s programs help companies and
tiers of the supply chain with the aim of driving other stakeholders fully understand social
improvements and convergence in responsible responsibility issues, overcome the root cause of
business practices. unsafe, unfair or illegal conditions for workers,
and build sustainable solutions into business
Through a secure online platform, Sedex practices, benefiting companies and workers
members can share and manage information alike. For more information, please visit
related to Labour Standards, Health & Safety, www.verite.org.
The Environment and Business Ethics. Members
also have access to a range of resources and
reports, including industry specific questionnaires
and market leading risk analysis tools, developed
with global risk experts Maplecroft. Additional
support services such as supplier engagement,
audit management and risk screening are also
available through Sedex Information Exchanges’
sister company, Sedex Solutions. For more
information, please visit www.sedexglobal.com.
Carmel Giblin
General Manager
Introduction
What is this workbook for? vi
Who is it for? vi
Why is it important? vi
How was this workbook developed? vi
4.2 Anti-Corruption
Definition 16
Benefits 16
Requirements 17
Achieving and Maintaining Standards 18
Common Audit Non-compliances 24
Case Study 25
Resources and Guidance 26
This workbook is a guide to help suppliers understand Managing the risk of harm or unfair treatment to your
what ‘good practice’ looks like when thinking about employees or damage to the environment is good
meeting ETI and other Code requirements, and how business practice. In a world where companies are
you can get there. The following chapters will help you expected to demonstrate corporate social
take a systems approach to find and fix the gaps that responsibility (CSR), you are also protecting your
can lead to social and environmental non- company’s reputation. And because your customers
compliances. What this workbook is not is a standard must protect their own reputation for ensuring the legal
for you to adhere to, or another management system. and humane treatment of workers in their supply
If you are operating a factory or a farm, you already chains and the minimising of environment impact, you
have a management system, even if it is an informal are protecting your business relationship with these
one. customers as well.
What we are offering is a practical risk-management Research has shown a direct link for many companies
tool for building controls into the business processes— between CSR and other business benefits, such as
for example, hiring and paying your employees—that savings from worker retention and improved
you are already using. These controls will help you productivity from stronger worker-management
meet your customers’ and your own business, social communication and engagement processes. Our
and environmental responsibility objectives. approach recognises this link between the bottom line
and a safe and fair workplace.
Who is it for?
How was this workbook developed?
This workbook is written for the people in factories and
farms who make decisions that have an effect on the Verité has developed this workbook in partnership with
working conditions of their employees or the Sedex based on over 15 years of experience
surrounding environment. You may be the owner of a researching and helping to address the challenges of
smallholder farm, the human resources director of a balancing CSR and business imperatives in global
large corporation, or the compliance officer of a mid- supply chains. We are grateful to the Sedex members
size factory in charge of making sure your company who have contributed case studies, feedback and
passes your customers’ social audits. The basic risk- resource documents that are the product of their many
management approach we have described in these years of work on these issues. A number of NGOs
chapters applies to businesses of all sizes in all served as valuable reviewers and advisors as well.
industries. We will list all contributors as soon as the workbook is
complete. Even then, this collaboration will continue.
We intend this workbook to be a ‘living’ document that
will be continuously improved with the learning and
feedback of members and other stakeholders over
time.
The workbook is available in PDF form on the Sedex website either in sections or individual chapters.
Benefits
Requirements
Policy
Procedures
Documentation
Monitoring
Communication and Training
Please note that this list is only a suggested course of action, and is not an exhaustive list.
Each chapter includes a sample of audit non-compliances from the Sedex database and a case study
provided by Sedex members. The chapters also offer answers to common questions, best practices,
resources and guidance, signposts to training, and a glossary of key terms.
Chapter 4.1
BUSINESS ETHICS
MANAGEMENT
SYSTEMS
Business Ethics Management Benefits
Systems Why should you do it?
2
Other International Standards and Guidelines:
Requirements
What do you need to do? ISO 26000 (2010), Section 6.6, Fair Operating
Practices, contains specific guidance on how
companies can manage business practices
risks:
There are no ETI Base Code
Clauses that address business Fair operating practices concern ethical
ethics. However, business ethics conduct in an organisation's dealings with
is an essential component of other organisations. These include
corporate responsibility and social relationships between organisations and
compliance. As such, Sedex government agencies, as well as between
recommends member companies organisations and their partners, suppliers,
to use a management systems contractors, customers, competitors, and the
approach to control business associations of which they are members.
ethics risks like bribery, corruption, legal compliance,
Fair operating practice issues arise in the
protecting sensitive information and whistleblower
areas of anti-corruption, responsible
protection.
involvement with public officials, fair
ETI Principles of Implementation competition, socially responsible behaviour,
relations with other organisations and respect
Although developed primarily to improve conditions for for property rights.
workers, the ETI Principles of Implementation provide
useful guidance for suppliers who would like to
integrate ethical business practices into their business
management system.
6. Transparency (fair and accurate reporting, FCPA – Foreign Corrupt Practices Act
response to violations). (1998) requires:
3
corruption are reviewed, discussed and There is no damage to company reputation as
recorded. a result of fraudulent or unfair business
— Staff training. practice.
UK Bribery Act (2010) creates the following There is a process to protect the confidentiality
of supplier and employee whistleblowers.
offences:
It is important that you also regularly monitor your
— Active bribery: promising or giving a
processes and controls to make sure they are
financial or other advantage.
working.
— Passive bribery: agreeing to receive
or accepting a financial or other
advantage. A systems approach is ‘self-
correcting.’ It will enable to you
— Bribery of foreign public officials.
make sure that all requirements
— The failure of commercial are being consistently met.
organisations to prevent bribery by
an associated person (corporate
offence).
Policies
Achieving and Maintaining (rules)
Standards
How do you do it?
Your company should have a business ethics policy or
code that includes the following:
You can best meet standards by using a systems
approach. In other words, you add controls to the A written statement that clearly defines your
processes you already use to run your business. And company’s approach to conducting business in a
you make sure your policies and procedures are fair and ethical manner. This should include
designed to ensure that: commitments to:
You are aware of legal and customer Compliance with applicable local and
requirements. international laws and regulations.
There is a process in place to verify that The scope of the policy should include, at a
workers and management are working minimum, all of the following business ethics
according to legal and customer requirements. topics:
4
Prohibiting bribery, corruption and allegation reporting process to make sure that
extortion. alleged business conduct issues are addressed.
Giving and receiving gifts. Monitoring and following up on all concerns and
issues related to the implementation of business
Protection of company and customer
conduct policies and procedures.
intellectual property and information.
The policy should be signed by the most senior Ways to track and understand business ethics
manager of the company. laws, regulations, and customer requirements.
5
The ways in which the company protects the
privacy of personal information of every person Communication and Training
you do business with.
You should use the following methods to make sure
A formal process for workers, managers, your employees are aware of your business ethics
suppliers and customers to anonymously report policies and procedures:
any concerns about the implementation of your
company’s policies. The process should detail the Provide training programmes for new managers,
way your company investigates and resolves supervisors, and newly hired workers on your
reported allegations. company’s business ethics policies and
procedures.
A disciplinary procedure for company employees
and managers who are found to have violated All employees must be provided with on-going
company business conduct policies and training and information on the business ethics
standards. issues associated with their jobs using classroom
training, team and department meetings, written
The Anti-Corruption chapter in this workbook describes materials, and work area postings.
in more detail the procedures needed for specific
business ethics issue areas. Make sure the training covers all applicable
business ethics laws and regulations.
The Headline Test Use scenarios in the training that are tailored to
local issues and culture.
Before making a business
decision, consider how it would Display business ethics policies and local legal
look on the front page of the requirements in areas where all employees will
newspaper or as the lead story on see them and in a language they understand.
the evening news. Communicate the company’s business ethics
requirements, as well as the laws and standards,
to the company’s suppliers using your website, in
contract terms and conditions, and during periodic
meetings.
6
The topic-specific documents listed in the Anti-
Living Up to Your Company’s Corruption chapter of this workbook.
Values
Always do the right thing in business
dealings with customers, suppliers
Monitoring
or governments, even with pressure
or incentive to do otherwise.
You will need to check if your business ethics policies
However, do not put yourself in are being followed and that the controls to make sure
danger. Report any incidents of your company is meeting code and legal requirements
threats or pressure to violate are effective. The following steps can be used to
business ethics policies to your evaluate and improve the effectiveness of your
company’s responsible manager. programs:
Remember that your company’s 1. Audit your system to identify actual and potential
reputation is your most valuable problems meeting laws and standards. Audits can
asset but can be easily lost. be performed by trained and qualified internal staff
or by external auditors—including from your own
customers.
7
More than one functional department is often
responsible for business conduct issues.
2. Establish and track key performance indicators Solutions to problems may involve, for
(KPIs) to measure how well your business example:
management processes and procedures are
working on an on-going basis. Procurement staff who manage
contracts with sub-contractors, on-site
Regularly survey workers to measure their contractors and other suppliers.
satisfaction with the implementation of your
business conduct policies and practices. Finance staff for the practices of
reporting business and financial
Track the number and type of reported performance.
allegations of business misconduct. Establish
Internal auditors who monitor problems.
goals and metrics for issue areas that may be
in need of improvement. Supervisors to monitor the
implementation of policies every day.
Measure training effectiveness and learning
retention by testing employees immediately When identifying a solution to a business
after training, and using follow-up ethics problem, work with all departments and
questionnaires three to six months after personnel involved.
training.
8
must be at least detailed enough to meet those
requirements.
Common Audit Non-compliances from
the Sedex Database As for records, you only need to maintain items that
are needed to verify that you are meeting standards,
The following are the most common non- such as financial records, copies of non-disclosure
compliances against this issue. If properly agreements, and records of allegations of misconduct
implemented, the guidance in this chapter can and how they were investigated and resolved.
help reduce the incidence of these problems:
My company has a certified Quality Management
Inadequate code and system System. Can we use this system for business
implementation.
ethics?
Inconsistent recordkeeping.
Yes. In fact, any company that has a formal
No general management systems in place. management system, like ISO 9000 or ISO 14001, can
also use it to manage compliance to business ethics
Lack of employee awareness of the social
standards rather than creating a separate business
and ethical standards the company
ethics management system. The risk assessment,
upholds.
regulatory tracking, training, communication, grievance
Sedex provides a document with suggested possible process, auditing, corrective action, and other
corrective actions following a SMETA audit. This is
elements of these systems can very easily be adapted
available to Sedex members only in the Sedex Members
Resources section: for business ethics management.
Sedex Corrective Action Guidance
What is Plan-Do-Check-Act?
9
The government is investigating a company in the
area that my company does business with. The Why do management systems fail?
investigation is looking closely at all documents,
including email. What should I advise my Lack of senior management sponsorship and
employees to do? commitment.
Your employees need to understand that whenever Failure to assign a senior manager with
they create documents and records, including emails, responsibility and accountability for implementing
it is important to always assume that they may be the system.
made public. Your training should instruct them that
Companies try to create a system that is more
they need to cooperate fully with any investigation and
complicated than their current business
that once written, emails and other documents are
management system.
company business records. Their original form should
not be altered. Management believes that the business ethics
compliance objectives of the system will conflict
with business objectives.
10
Case Study
11
Resources and Guidance
The following organisations, websites, and documents provide additional information on Business
Ethics Management systems:
SMETA Draft Supplement for Environment and Business Practices Process (2010) (behind
member log in): https://www.sedex.org.uk/sedex/go.asp?wsfedsession=0
Signposts to Training
12
Key Terms
Management System: The framework of policies, processes, and procedures used to ensure
that an organisation can fulfil all tasks required to achieve its objectives.
13
Copyright
All texts, contents and pictures on this publication are protected by copyright or by the law on trademarks. The publication is
subject to the copyright of ‘Sedex Information Exchange Ltd’. Reproduction is authorised, except for commercial purposes,
provided that “http://www.sedexglobal.com” is mentioned and acknowledged as the source. Copyright of third-party material found
in this site must be respected.
The information contained in this document is provided by Verité and while every effort has been made to make the
information complete and accurate and up to date, Sedex makes no representations or warranties of any kind, express or
implied, about the completeness, accuracy, reliability, suitability or availability with respect to the information contained
therein. Any reliance you place on such information is therefore strictly at your own risk. In no event is Sedex liable for any
loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever
arising from loss profits arising out of, or in connection with, the use of this document.
14
SEDEX SUPPLIER WORKBOOK
Chapter 4.2
ANTI-CORRUPTION
Anti-Corruption
What does it mean?
16
of political processes, impoverishment of societies
and damage to the environment.
17
FCPA – Foreign Corrupt Practices Act (1998)
requires:
— Due diligence on customers, the nature of
their business and the types of financial Achieving and Maintaining Standards
transactions they undertake. How do you do it?
— Conducting senior management meetings
where the risks of bribery and corruption are You can best meet standards by using a systems
reviewed, discussed and recorded. approach. In other words, you add controls to the
— Staff training. processes you already use to run your business (such
as procurement and permitting) and you make sure your
— Independent monitoring.
policies and procedures are designed to ensure that:
Sarbanes-Oxley Act (2002) requires companies
‘to protect investors by improving the accuracy There is no pressure to make facilitation payments
and reliability of corporate disclosures...’ in order to ensure prompt shipment of products from
ports and airports.
UK Bribery Act (2010) creates the following
offences: Company employees are not faced with requests
from customers for favours, gifts or kickbacks in
— Active bribery: promising or giving a exchange for orders.
financial or other advantage.
You understand the bribery and corruption risks
— Passive bribery: agreeing to receive or faced by the company.
accepting a financial or other
You establish and broadly communicate a company
advantage.
anti-corruption policy.
— Bribery of foreign public officials.
When entering into business relationships with
— The failure of commercial organisations partners, agents and contractors, you perform due
to prevent bribery by an associated diligence to learn their business practices.
person (corporate offence).
You evaluate the company’s compliance with the
UN Global Compact, Principle 10: Businesses US Foreign Corrupt Practices Act, UK Anti-Bribery
should work against corruption in all its forms, Act and other applicable legal requirements.
including extortion and bribery.
There is a procedure for company employees and
external parties to report allegations of bribery and
corruption and no procedure to investigate such
allegations.
18
Policies Best Practice
(rules)
Due Diligence
Your company policies should include the following When your business depends on the use of
commitments: contractors, vendors, agents and other
intermediaries, due diligence is a must. Be sure
Written public statement that ethical business to take a risk-based approach when working with
practice is a core value, supported by the owner, any persons or organisations that provide goods
board and senior management, and the company and services to or on behalf of the company, in
will not participate in or tolerate any kind of order to identify and control bribery and
bribery or corruption corruption risks.
19
A code of behaviour (business conduct) for
managers, supervisors, and employees that aligns
with international anti-corruption standards, local
laws and regulations, and customer requirements.
20
Communication and Training
21
Training should emphasise the standard way to
apply the anti-corruption procedures so that all
supervisors and managers do it the same way.
22
corruption procedures are working (for results to improve your company anti-corruption
example, ‘all allegations of corruption are policies and procedures.
investigated and addressed with two weeks’
or ‘90% of employees surveyed understand
the company’s anti-corruption policy.’)
23
Common Questions
What kind of allegation reporting does my company
Is it ever appropriate to accept a gift or business need?
courtesy from a supplier? As with your grievance procedure (see the ‘Discipline
It depends on the situation. You should not accept and Grievance’ chapter), your reporting process must be
anything of value from a current or prospective anonymous and must protect the person or organisation
supplier or vendor if there is a competitive bid or making the allegation from reprisal. It is suggested that
other procurement process pending or underway. a specific individual or department be assigned to
manage the process. This person should have no
If you work in purchasing or procurement or in a responsibilities in purchasing, procurement, contracting,
similar role, you should not accept gifts or business or managing contractors and vendors.
courtesies from anyone who may seek contracts or
business from the company. However, if you do not The reporting mechanism can be a hotline phone
make procurement or contracting decisions and work number, email, or a special postal address. Each of
with an existing supplier on a regular basis, some these communication channels must be accessible only
business courtesies may be allowable. For example, by the designated person or department.
it might benefit your company to have lunch with a All reports of misconduct should be thoroughly
business partner if the lunch is a meeting to discuss investigated and the results of the investigation
business issues and build working relationships. That communicated back to the person or organisation
is a valid business purpose. In contrast, it does not making the report (if known).
benefit your company to accept gifts of personal
items, such as jewelry.
If in doubt, politely refuse the gift or courtesy, or ask
your manager for guidance.
Common Audit Non-compliances from
the Sedex Database
Best Practice The following are the most common non-compliances
In order to reduce the threat of bribery against this issue. If properly implemented, the guidance
in this chapter can help reduce the incidence of these
and corruption in your locale, work
problems:
with other companies to adopt the
same or similar anti-corruption policies Inadequate code and system implementation.
and practices. Inconsistent recordkeeping.
No general management systems in place.
What does it take to perform due diligence on a Lack of employee awareness of the social and
prospective business partner? ethical standards the company upholds.
The type of due diligence depends on the potential
risk of the engagement. In low risk situations, your Sedex provides a document with suggested possible corrective
actions following a SMETA audit. This is available to Sedex
company may decide that there is no need to conduct
members only in the Sedex Members Resources section:
any due diligence. In higher risk engagements, due Sedex Corrective Action Guidance
diligence may include conducting direct questioning of
the prospective partner, indirect investigations, or
general research on proposed associated persons or
organisations. Appraisal and ongoing monitoring of
‘associated’ persons, once engaged, may also be
required, depending on the identified risks. Generally,
more information is needed from prospective and
existing companies than from individuals.
24
Case Study Among the Coalition’s 2013 objectives is to sign up
200 additional companies. Meanwhile, with the
Anti-Corruption: Combat through Alliance assistance of TI, Diageo will continue to provide
training programmes to companies who have already
Corruption has financial costs, impacts on signed up to the initiative, to help organisations and
management time and resources, and can impair companies embed core values such as respect for
reputation. To prevent corruption in your supply the rule of the law, probity, accountability, integrity
chain, it is critical to focus on capacity building, and transparency. The Coalition is committed to
implementing systems and building comprehension. supporting organisations to practically and
consistently embed ethics and compliance principles
Diageo subsidiary Guinness Cameroon SA was
in their day-to-day business, by creating a platform
having multiple issues with corruption, such as
for public bodies and private companies to combat
drivers being stopped on the road and asked for
corruption together.
money due to a real or imaginary infringement.
“We are convinced that this initiative will make a
“These were frustrating as employees knew that
difference in Cameroun as we plan for the third phase
paying these bribes was against company policy and
of the project when we aim to introduce anti-
was adding unnecessary complications to doing
corruption legislation. The results on the ground are
business,” says David Lawrence, Compliance &
visible with Guinness employees experiencing
Ethics Programme Director. Diageo decided to use
significantly reduced levels of interference at airports,
its position as a leading company in the country to
on the roads and at customs.”
influence the government to commit to legislate
against corruption. Diageo is the world’s leading premium drinks business with
its products sold in more than 180 countries around the
Diageo gained Government sponsorship and brought world with manufacturing facilities across the globe. To find
together sixty other companies, NGOs and out more about Diageo, visit: http://www.diageo.com.
government bodies to discuss ways of tackling
corruption; who, by signing up to an anti-corruption
pact, formed the Business Coalition against
Corruption in Cameroun. The aim was to better
develop the government’s anti-corruption agenda
and it was officially launched in 2011.
The event, which included a presentation by Sedex is always looking for new
Transparency International (TI), the world’s leading case studies. If you have a best
anti-corruption NGO, made the front page of the practice example case study
main national newspaper, showing the importance that you would like to be
and impact it had in Cameroun and that corruption featured, please send it to
will not be tolerated. content@sedexglobal.com
25
Resources and Guidance
The following organisations, websites, and documents provide additional information on anti-corruption:
Sedex Members Ethical Trade Audit (SMETA) Best Practice Guidance: http://www.sedexglobal.com/wp-
content/uploads/2012/07/SMETA-Best-Practice-Guidance-4-Pillar-4_0-L.pdf
SMETA Draft Supplement for Environment and Business Practices Process (2010) (behind member log in):
https://www.sedex.org.uk/sedex/go.asp?wsfedsession=0
Transparency International
Business Principles for Countering Bribery:
http://www.transparency.org/whatwedo/tools/business_principles_for_countering_bribery/1/
Business Principles for Countering Bribery – Small and medium enterprise (SME) edition:
http://www.transparency.org/whatwedo/tools/business_principles_for_countering_bribery_sme_editi
on/1/
UN Global Compact - Transparency International Reporting Guidance on the 10th Principle against
Corruption: http://www.unglobalcompact.org/docs/issues_doc/Anti-Corruption/
UNGC_AntiCorruptionReporting.pdf
26
Signposts to Training
Key Terms
Absenteeism: A measure of the number of workers who do not come to work when
they are scheduled to do so.
Conflict of Interest: When someone has competing personal or professional financial interests or obligations
that could wrongly influence that person’s decision making.
Due diligence: The investigation or audit of a potential business partner (individual or company) before
entering into a contract, in order to determine the corruption or bribery risks of the engagement.
Facilitation payment: A form of bribery made for the purpose of expediting or ‘facilitating’ performance of a
routine government action by a public official, such as approval of a shipment from a port or airport.
Nominal value gift: A value so small that it is not likely to influence the judgment or behaviour of the recipient.
Reprisal: Unjust punishment of an individual worker for filing an allegation of bribery or corruption.
27
Copyright
All texts, contents and pictures on this publication are protected by copyright or by the law on trademarks. The publication is
subject to the copyright of ‘Sedex Information Exchange Ltd’. Reproduction is authorised, except for commercial purposes,
provided that “http://www.sedexglobal.com” is mentioned and acknowledged as the source. Copyright of third-party material
found in this site must be respected.
The information contained in this document is provided by Verité and while every effort has been made to make the
information complete and accurate and up to date, Sedex makes no representations or warranties of any kind, express or
implied, about the completeness, accuracy, reliability, suitability or availability with respect to the information contained
therein. Any reliance you place on such information is therefore strictly at your own risk. In no event is Sedex liable for any
loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever
arising from loss profits arising out of, or in connection with, the use of this document.
28