The nature of the due diligence conducted is to be determined on a case-by-case basis by our procurement team, however, as a general rule, our Procurement policy suggests that: • integrity due diligence must be conducted on prospective suppliers that are considered to be at a high risk of bribery and corruption; • due diligence on information/data security (including cyber security) must be conducted if confidential processed or held by the supplier; • due diligence on human rights policies, equal opportunity policies and employment policies, with particular focus on the provider’s commitments on the use of child or forced labour in their operations or supply chain must be conducted where Group procurement deems there is a risk of non-conformity with 3i’s approach; and • a thorough evaluation of business resilience must be undertaken that will include the financial performance of the supplier, insurance cover, evidence of accreditation, of contingency planning and third-party dependencies.