For many businesses, the Modern Slavery Statement follows a familiar annual cycle. Information is gathered from different teams, audit activity is pulled together, policies are checked, training is counted, the board reviews the final wording and the statement is published.
There is nothing unusual about that. For organisations in scope, section 54 of the Modern Slavery Act 2015 requires an annual statement setting out the steps taken to address modern slavery in operations and supply chains, and government guidance points businesses towards areas such as risk assessment, due diligence, training and effectiveness. (gov.uk)
The more useful governance question is what would happen if the statement itself disappeared.
Would a supplier still be escalated because its risk profile had changed? Would procurement still see overdue corrective actions? Would repeated findings affect future scrutiny? Would someone notice that a high-risk production site had gone too long without the agreed follow-up?
If those decisions would continue anyway, the statement is reflecting a live programme. If they would not, the business may be documenting activity without yet using that information to govern risk.
Reporting activity and governing risk are different things
Modern Slavery Statements naturally contain activity: how many suppliers were assessed, which policies were updated, what training took place and which audits were completed. All of that belongs there.
But the government’s guidance goes further. It encourages organisations to explain how they prioritise risk, what action they take in response, how they measure effectiveness and what progress they are making over time. (gov.uk)
That distinction matters because knowing that 20 assessments took place is reporting, while knowing why those suppliers were selected, what changed as a result and which issues still need attention is governance.
The same applies to corrective actions. A closure rate tells you something, but a pattern of repeat findings, slow remediation or deteriorating supplier performance tells you far more about where management attention is needed.
Most businesses already hold much of this information. The harder part is making sure it is useful between reporting cycles rather than only becoming visible when the next statement is due.
What does the business actually see during the year?
Imagine a procurement or responsible sourcing lead opening the programme on a Monday morning.
Can they immediately see that one supplier has moved from medium to high risk? Can they identify corrective actions that are overdue, suppliers that are improving, or sites that have entered the supply chain but not yet been assessed?
That is the point at which programme data becomes management information.
The value is not in the dashboard itself. It is in what happens because the information is visible enough to influence a decision.
A risk rating may affect which supplier is reviewed first. A pattern of repeat findings may trigger escalation. Slow remediation may change the level of follow-up. A new production site may prompt a different due diligence response. Those are governance decisions, not reporting exercises.
The statement should be the output, not the operating system
A Modern Slavery Statement is published once a year, but supply chain risk does not operate on that timetable.
Suppliers change production sites. Labour models shift. New subcontractors appear. Corrective actions become overdue. Risk improves in some places and increases in others.
If the programme is working well, those changes should influence decisions as they happen.
By the time the annual statement is drafted, the business should already know where risk increased, where suppliers improved, what required escalation and where progress was slower than expected. The statement then becomes a record of governance that has already taken place.
That is much stronger than reconstructing the year from spreadsheets and email threads when the reporting deadline arrives.
A useful test for the programme behind the statement
Before the next statement is written, ask whether the business can answer these questions without starting a reporting exercise first:
Can we identify our highest-risk suppliers and sites?
Can we explain what is driving those ratings?
Can we see where corrective actions are overdue or recurring?
Can we show whether supplier risk is improving over time?
Does that information influence audit planning, escalation, supplier reviews or sourcing decisions?
If the answers already exist inside the programme, the statement is doing what it should do: documenting a governance process that is already active.
If they do not, the issue is not the statement itself. It is whether the underlying programme is producing information that people can actually use.
The statement should describe the governance. It should not be the thing creating it.
If your team is reviewing how supplier risk, audit findings and corrective action data are being used throughout the year, Verisio can help assess whether that information is feeding into day-to-day supplier assurance.
