Supply-Chain Assurance Approach

Each participating Black & White business is responsible for the suppliers and subcontractors it appoints. The shared framework provides a risk-based method for checking identity, competence and suitability without suggesting that every activity is self-delivered or that Group approval replaces the contracting business's judgement.

Checks reflect the work and may cover legal identity, authority, insurance, licences, qualifications, safety arrangements, financial or ethical concerns, data security and previous performance. Higher-risk work, access to sensitive premises, personal data, regulated activities or important dependencies can require enhanced review.

Approval is limited to the recorded scope, location, risk and review period. Before work starts, the responsible business defines the instruction, site rules, evidence, reporting and acceptance requirements. Performance, incidents, defects, complaints, expiring evidence and material changes are monitored proportionately. Serious unsafe conduct, dishonesty, invalid credentials, security incidents or unauthorised subcontracting can result in immediate restriction or removal.

Supplier approval does not authorise use of the Black & White identity. Detailed assessment records and monitoring controls remain internal; this summary explains the public assurance principles.