Procurement & Vendor Management (LkSG)
Build practical LkSG expertise, strengthen supplier risk management, and make smarter, compliance-ready procurement decisions.
Discover whether a Supplier Code of Conduct or contract clauses work best under the LkSG. Learn how procurement teams can combine both tools to strengthen supplier compliance, manage risk, support audits and improve supply chain due diligence.
Build practical LkSG expertise, strengthen supplier risk management, and make smarter, compliance-ready procurement decisions.
Contract clauses can give procurement teams clearer rights and obligations, but detailed wording does not automatically improve supplier performance. If requirements stay within the supplier’s legal department, operational teams and subcontractors may never understand what they must do.
Overly broad clauses can damage supplier relationships. Requirements covering every supply-chain tier, unlimited information or unrestricted audits may delay negotiations and place disproportionate pressure on smaller businesses.
The official BAFA guidance on collaboration in the supply chain explains that companies covered by the LkSG remain responsible for their own due-diligence obligations. They may involve suppliers, but they cannot simply transfer the full legal burden to them. Supplier requests should therefore be risk-based and necessary.
Contract clauses work best when they are clearly communicated, realistically implementable and linked to monitoring. A clause that is never explained or enforced can create false confidence.
|
Comparison factor |
Supplier Code of Conduct |
Contract clauses |
|
Main purpose |
Communicates common standards |
Defines specific obligations |
|
Scalability |
Suitable for many suppliers |
Requires individual management |
|
Customisation |
Usually limited |
Can reflect supplier-specific risks |
|
Accessibility |
Often easier to understand |
May contain complex legal language |
|
Audit rights |
Usually general |
Can define scope and procedure |
|
Incident reporting |
May state an expectation |
Can establish deadlines |
|
Corrective action |
Usually principle-based |
Can specify actions and escalation |
|
Best use |
Onboarding and baseline standards |
Medium- and higher-risk relationships |
A Supplier Code of Conduct is strongest when an organisation needs one consistent compliance baseline. Contract clauses are stronger when procurement needs measurable duties, evidence, audit rights, reporting deadlines or remedies.
For most LkSG-related relationships, the best approach is to connect the code, contract and supplier-management process.

Risk management should determine the depth of the requirements. Procurement teams should consider country, sector, workforce, product, subcontracting, supplier criticality and known incidents.
Lower-Risk Suppliers
A proportionate approach may include a standard Supplier Code of Conduct, basic screening, a general compliance clause and periodic review. Intensive audits may not be necessary where no significant risk indicators exist.
However, a lower-risk classification should not become permanent. Changes in the supplier’s location, ownership, production model, subcontracting arrangements or operating environment may create new risks. Supplier profiles should therefore be reviewed periodically.
Medium-Risk Suppliers
Measures may include formal incorporation of the code, a targeted questionnaire, evidence requests, supplier training, incident-notification duties and a corrective-action process.
For example, procurement may request evidence relating to workplace safety, environmental permits, recruitment practices or employee training. The type of evidence should reflect the actual risk rather than being collected simply because it is available.
Higher-Risk or Critical Suppliers
Stronger controls may include supplier-specific schedules, defined information and audit rights, sub-supplier requirements, corrective-action deadlines, enhanced monitoring and management escalation.
A strategically critical supplier may also require business-continuity planning. Immediate termination may not always be realistic or beneficial, particularly where disengagement could increase harm to workers or communities. Procurement, legal and compliance teams should therefore establish a responsible escalation process.
The objective is not to impose the strictest contract on every vendor. It is to select measures capable of addressing the identified risk.

An effective system combines policy, contracts, supplier engagement and evidence.
1. Establish Corporate Expectations
The company’s human-rights strategy, environmental commitments and procurement policies should define its position. Internal teams that select and manage suppliers must understand these expectations.
Procurement employees should also know how these commitments influence tender evaluation, supplier selection, pricing decisions and contract renewal.
2. Create a Clear Supplier Code of Conduct
The code should translate corporate commitments into supplier-facing standards covering labour rights, safety, environmental protection, discrimination, corruption and grievance channels.
Its language should be clear enough for non-legal audiences. Where suppliers operate internationally, translations or explanatory guidance may be needed.
3. Incorporate the Code Correctly
The agreement should clarify whether the code forms part of the contract, which version applies and which document takes priority if provisions conflict.
This is important because businesses may use several documents at once, including framework agreements, purchasing conditions, supplier manuals and sustainability policies. Unclear document hierarchy can create uncertainty during audits, disputes or corrective-action discussions.
4. Add Risk-Specific Clauses
Additional clauses can address information sharing, incident reporting, audits, corrective action, subcontracting and escalation. They should reflect actual supplier risk rather than a one-size-fits-all template.
A high-risk manufacturing supplier may require detailed safety and subcontracting provisions, while a low-risk professional-services provider may need only standard compliance wording.
5. Train and Support Suppliers
Suppliers may need translated documents, guidance, workshops or templates, particularly where requirements involve unfamiliar human-rights or environmental controls.
Training should explain why the requirements matter, what evidence is expected, who should report incidents and how the buyer will respond to identified problems.
6. Verify and Improve
Verification may include self-assessments, document reviews, certifications, worker-feedback channels, remote reviews or on-site audits. When problems are found, procurement should investigate root causes, agree corrective actions and verify results.
This model reflects Section 6 of the LkSG, which identifies supplier selection, contractual assurances, training and appropriate contractual control mechanisms as preventive measures for direct suppliers. It also requires regular effectiveness reviews. Procurement & Vendor Management (LkSG)
Contract wording requires legal review, but procurement professionals should understand the main clause categories.
Scope and definitions: Identify the suppliers, sites, services, products and standards covered. Clear definitions help prevent disputes about whether a requirement applies.
Code incorporation: State whether the Supplier Code of Conduct is contractually incorporated, which version applies and how conflicts will be resolved.
Information and evidence: Define what information may be requested and how confidentiality, data protection and commercially sensitive information will be protected.
Incident notification: Explain what incidents must be reported, to whom and within what period. The process should cover both confirmed violations and serious allegations requiring investigation.
Audit and verification: Clarify the audit scope, notice, access, confidentiality and follow-up process. Audit rights should be proportionate and used according to risk.
Corrective action: Establish responsibilities, deadlines, evidence requirements and effectiveness checks. Suppliers should understand how findings will be closed and when further escalation may occur.
Sub-supplier management: Require proportionate steps to communicate standards further down the supply chain without demanding unrealistic guarantees.
Escalation and remedies: Set out a structured response, including investigation, improvement planning, additional monitoring, suspension and responsible disengagement where necessary.
These clauses create value only when procurement, legal, contract management and compliance teams agree who will apply them after signature.
Procurement software can support supplier registration, screening, questionnaires, evidence collection and audit scheduling. Contract management software can maintain clause libraries, track changes, record deviations and alert teams to renewals or outstanding obligations.
A connected supplier management system may display:
This creates a clearer link between the supplier contract and day-to-day vendor management.
Technology should support professional judgement, not replace it. A completed questionnaire does not prove safe working conditions, and an automated score cannot show the full picture of supplier operations. Digital tools are most valuable when they connect documents to owners, deadlines, evidence and decisions.
A frequent mistake is requiring every supplier to accept the same clauses regardless of risk. Another is treating a signed code as proof of complete compliance.
Other common weaknesses include:
Commercial purchasing practices matter too. Unrealistic lead times, sudden order changes and excessive price pressure may contribute to poor working conditions. Supplier expectations are more credible when the buyer’s own procurement behaviour supports implementation.
For example, a contract may require safe working hours while the buyer repeatedly makes urgent order changes that require excessive overtime. Effective due diligence therefore requires companies to examine their own sourcing and purchasing decisions, not only supplier documents.
Modern procurement roles increasingly combine commercial negotiation, vendor management, risk management and compliance. Professionals may support onboarding, risk assessment, contract reviews, audits and corrective actions.
These capabilities are relevant to:
Professionals do not need to become qualified lawyers to contribute effectively. However, they should understand the commercial purpose of supplier clauses, recognise when legal advice is needed and know how contractual obligations must be converted into operational controls.
Professionals and job seekers can build these skills through the Procurement & Vendor Management (LkSG) course. The course covers risk-based sourcing, supply chain due diligence, supplier contracts and codes of conduct, monitoring, audits, grievance mechanisms and documentation. It is suitable for professionals, beginners and career changers seeking practical procurement and compliance knowledge.
For most supplier relationships, neither a Supplier Code of Conduct nor contract clauses work best in isolation.
A Supplier Code of Conduct provides a consistent foundation and helps suppliers understand the organisation’s human-rights, environmental and ethical expectations. Contract clauses convert relevant expectations into specific responsibilities, information rights, controls and consequences. Training, supplier engagement, monitoring and corrective action determine whether those documents produce meaningful results.
Lower-risk suppliers may require a standard code and proportionate controls. Higher-risk suppliers generally need more detailed clauses, stronger evidence and closer monitoring. Requirements should always be linked to the identified risk and the company’s ability to influence the supplier.
The best approach is therefore a layered one:
The goal is not to collect signatures or create the longest contract. It is to build a practical system that identifies risk, clarifies responsibility, supports improvement and produces evidence that measures are working.
This article provides general procurement and compliance information and does not constitute legal advice. Contract wording should be reviewed according to the supplier relationship, identified risks and applicable law.
This version can be combined directly with the previously written first half after removing the temporary final transition sentence from that section.