Define measures for a risk criterion
Overview
This page covers defining the mitigation measures for one EUDR risk criterion. You select from the recommended measures, add your own, and attach supporting documentation. What you save is stored globally and reused in every risk assessment.
🟢 Why this matters. The measures you define here are how you evidence the risk mitigation the EUDR requires under Article 11. Well-defined measures, with documentation, are what let a criterion be brought down to low. See the consolidated EUDR text.
Before you start
- Know which risk criterion you are defining measures for.
- Have any supporting documents ready to upload.
Step by step
- Go to Risk Mitigation Measures.
- On the criterion's row, select Edit Measures if measures already exist, or Add Custom Measures if none do. The Edit Mitigation Measures dialog opens for that criterion.
- Under Mitigation Measures, select from the recommended measures (tagged EU Commission), and add any custom measures of your own with their details.
- Upload supporting documentation to evidence the measures.
- Save. The measure count on the criterion's row updates, and the measures become available in assessments.
The recommended measures
The recommended measures reflect Article 11 of the regulation, and include:
- Requiring additional information, data, or documents.
- Carrying out independent surveys or audits.
- Taking other measures pertaining to the information requirements set out in Article 9. You can apply any of these, and add custom measures such as Enhanced supplier verification for high-risk countries.
Tips
- Define measures for your most common high-risk criteria first, so assessments move quickly.
- Attach the actual evidence (audit reports, certificates) rather than just naming a measure; it is what makes the mitigation defensible.
Troubleshooting
- A measure I defined is not appearing in an assessment. Confirm it was saved on the correct criterion. Measures are reused by criterion.
ℹ️ Regulatory context. Article 11 sets out the mitigation measures an operator can take where risk is more than negligible, including requiring more information and carrying out independent audits. See the consolidated EUDR text.