Step 2 — Conduct the assessment analysis
Overview
Step 2 is where you judge the risk. kolum gives every criterion an initial rating from the supplier's data and external data sources; you then reduce any criterion that is above low, until the overall risk is negligible or low.
🟢 Why this matters. Risk assessment is the second pillar of due diligence (Article 10). A Due Diligence Statement can only be submitted when the risk is negligible or low on every criterion, so this step is what unlocks Step 3. See the consolidated EUDR text.
When Step 2 is required
If the initial assessment is already Low risk, Step 2 is not required and you can move to submitting the statement. If it is Medium or High, you must work through the criteria and reduce the risk first.
Open the analysis
- Open the pair and go to Step 2 — Conduct Assessment Analysis.
- Select Continue Assessment Analysis, or Open Full Analysis to add detailed mitigation evidence.
How criteria are rated
kolum shows the criteria grouped (Geographic and Country Risk, Indigenous People, Documentation and Supply Chain, Compliance and Enforcement, Additional Information). Each criterion carries an initial assessment of Low, Medium, or High, with an explanation of how it was reached, drawing on the supplier's data and external sources such as the Article 29 country benchmarking, Global Forest Watch and RADD tree-cover data, the LandMark indigenous-lands database, and the Transparency International Corruption Perceptions Index. The full set is described on The 14 risk criteria.
Reduce the risk
For any criterion above low, there are two ways to bring it down:
- Add mitigation measures. On the criterion, select Add Mitigation Measures and apply a measure that addresses it. You can use a preset measure or one you have defined (see Risk Mitigation Measures).
- Collect more evidence. Request additional documents from the supplier so the criterion can be re-rated, using Request from Supplier on the pair. Work through every criterion until each is at low. When the overall risk is low, Step 3 becomes available.
Tips
- Start with the criteria rated High, since they block submission most heavily.
- Record the mitigation evidence in the full analysis, so the decision is defensible later.
Troubleshooting
- A criterion will not drop to low. It needs either a mitigation measure or supporting evidence. Add one, or request the document from the supplier.
- Step 3 is still locked. At least one criterion is above low. Review the analysis summary to find it.
ℹ️ Regulatory context. The criteria mirror the EUDR risk-assessment factors in Article 10, and residual risk must be no more than negligible before a product is placed on the market. See the consolidated EUDR text.