Human-rights due diligence can be included within broader enterprise riskmanagement systems, provided that it goes beyond simply identifying and managing material risks to the company itself, to include risks to people.