Module Learning Objective

investigate a relevant supplier risk proportionately

1. Regulatory Concept & Core Standards

Today we will learn to investigate a relevant supplier risk proportionately. Throughout the video, consider the difference between knowing a rule and applying it to a decision. We will work through an example, identify a possible failure and develop a response that can be used at work. Distinguish general purchasing controls from statutory public procurement. Current RHS principles require transparency, equal treatment and avoidance of conflicts harming competition. Examples do not impose an identical procedure or threshold on every purchase.

Supplier assessment may examine connections, capability and unusual payments. A warning sign requires verification rather than an automatic accusation. Public-procurement exclusions follow specific RHS conditions. A generic risk score does not replace procedural rules.

Apply the following rule: Section 13 requires reasonable grounds at reporting to believe that a breach has directly begun or been completed and falls within scope. Do not automatically extend this to every hypothetical future concern. KVS primarily addresses public functions and contains specific corruption-reporting provisions. Portuguese RGPC is not Estonian law. Risk matrices, internal plans and teaching methods are recommendations unless a specific legal duty is identified.

2. Practical Implementation & Procedure

Define the purpose and reliable sources. Check material discrepancies and request clarification. Avoid excessive personal data. Record decisions and distinguish statutory exclusion from ordinary management risk. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A supplier requests payment to a third party without explanation. The team checks the contract, recipient connection and payment grounds before proceeding. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does an unusual account alone prove corruption? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. It requires checking. Payment should not continue automatically before necessary explanations and authority are verified.

One mistake to avoid is: publishing an unproven accusation based on one warning sign.

Now apply the national rule to a second decision. The team presents every integrity instrument as mandatory in every country. How should it correct the claim?

Separate actual Estonian duties, their scope and recommended management methods. KVS public-function duties do not automatically apply to every private company. Each duty needs a source, while each internal choice needs a purpose, owner and evidence. Portuguese RGPC does not replace Estonian law.

National Legal Framework: Rikkumisest teavitaja kaitse seadus, transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.