To determine the risk environment of the business, you will need to conduct a situation-specific risk assessment. You will need to consider:
the products and/or services that are used, including the suppliers who provide them
any relevant internal and external sources (eg existing company policies, like a Whistleblowing policy or staff code of conduct)
any specific risks (eg country or sector risks)
For more information on these risk assessments, read Modern slavery statements.