Due diligence should match the relationship and the risk involved. Decide which facts you need to verify before granting someone access, spending money, or assigning responsibility.

Define due diligence for the role

A vendor handling sensitive data creates different risk than a landscaping contractor. An employee with financial authority creates different exposure than a temporary worker with no system access.

Verify core representations

Confirm identity, business status, licensing where applicable, professional history, references, and other material claims relevant to the engagement.

Review conflicts and warning indicators

Depending on the lawful purpose, organizations may need to assess undisclosed relationships, adverse business history, sanctions exposure, litigation, or patterns that create operational risk.

Use consistent due diligence criteria

Due diligence should follow documented standards so similar relationships are evaluated in a similar way. This improves fairness and defensibility.

Reassess over time

Risk changes. Critical vendors, key personnel, and sensitive partnerships may require periodic review rather than a one-time check at onboarding.

Start here

Create a checklist for one type of vendor or role. Keep the checks relevant, lawful, and consistent, and decide which findings require further review.

About Total Technical Solutions

Total Technical Solutions. People Solutions Results. We help with project delivery, business operations, websites, and training. Visit Total Technical Solutions or view more TTS articles.