Risk prevention depends on a governance of the supplier relationships at the right level (training for buyers, supplier training, segmentation of supplier base), on the suppliers’ formal engagement and the assessment of their CSR performance.