Supply Chain Audits – ESG Criteria & Best Practices

Supply chain audits and ESG audits are increasingly central to how organizations manage risk, ensure compliance and drive meaningful improvements across their supplier networks. As regulatory pressure intensifies and global disruptions continue to expose vulnerabilities, companies need clear, credible insight into supplier practices. A 2024 Gartner survey found that 42% of procurement leaders view supply disruptions as their top risk, making visibility into supplier performance and stability more critical than ever.

These audits are increasingly connected. ESG issues such as labor rights, emissions, and ethical sourcing directly impact supply chain continuity. At the same time, supply chain performance shapes a company’s ability to meet its ESG commitments. For today’s businesses, understanding the purpose and function of each audit type is the first step toward building a supply base that’s both responsible and resilient.

This article covers what each audit involves, how they differ and how companies are using both together to strengthen supplier oversight. 

What is a Supply Chain Audit?

Auditing supply chain activities should be a structured evaluation of the processes, operations and risks that span a company’s supply network. This covers everything from raw material sourcing and production through to warehousing, inventory management and final distribution. The goal is to assess how efficiently and responsibly goods and information move through the supply chain, and to identify gaps that could lead to unnecessary delays and excess costs or put their supply networks at risk.

For instance, a supply chain audit might reveal that delays are not coming from production, but from inconsistent warehouse handling or poor coordination between suppliers and logistics providers.

Depending on the scope, an audit might uncover inefficiencies in warehouse operations, vulnerabilities in vendor geographies or opportunities to reduce waste and improve delivery performance. It also provides insight into areas like health and safety, ethical sourcing, climate impact, labor and environmental impact.

Critically, supply chain audits enable decision-makers to move from assumption to evidence. That distinction matters more than many companies realize. Sphera’s 2026 Supply Chain Risk Report found that while 99% of supply chain leaders express confidence in the accuracy of their supplier ESG data, 73% still report experiencing financial or operational losses from supply chain disruptions. The gap between perceived visibility and actual exposure is where audits do their most important work. With a clear view of what is happening across internal and external networks, businesses can make smarter decisions to ensure continuity and profitability in an evolving market. 

ESG Audit vs. Sustainability Audit: What’s the Difference? 

The terms are often used interchangeably, but they are not the same thing. A sustainability audit typically focuses on a company’s internal initiatives and reporting outputs. An ESG audit goes further. It is a formal review of a company’s policies, practices and performance against environmental, social and governance criteria, covering both the organization itself and its supplier network. 

Where a sustainability audit might confirm that a company has a recycling program in place, an ESG audit evaluates whether that program is actually reducing material environmental impact, how it compares against industry benchmarks and whether the same standards are being applied across the supply base. The scope of an ESG audit typically includes:

• Emissions tracking
• Energy use
• Waste and resource management
• Diversity and inclusion
• Health and safety
• Anti-corruption measures
• Regulatory compliance

In many cases, this takes the form of a structured ESG supply chain assessment, where companies evaluate both their own operations and supplier networks against defined environmental, social and governance criteria.

ESG auditing also plays a critical role in supporting mandatory and voluntary reporting frameworks, helping businesses meet evolving disclosure requirements and align with stakeholder expectations. As ESG factors become more central to global business strategy, they are increasingly integrated into broader supply chain management programs. 

Compliance is no longer measured strictly by delivery timelines or product quality. Companies are now expected to evaluate supplier performance through the lens of environmental impact and ethical governance, extending accountability beyond corporate walls and aligning supplier oversight with long-term sustainability goals, investor expectations and regulatory requirements. 

How Supply Chain and ESG Audits Work Together

Though often managed by separate teams or systems, ESG and supply chain audits share a common purpose: identifying risks, improving performance and ensuring accountability across a company’s operations and supplier base. 

By clearly understanding the scope, criteria and goals of each audit, businesses can better integrate ESG considerations into supply chain strategies and create a more agile, transparent supply network in the process.

Supply Chain Auditing Process: Step by Step

The audit process is designed to produce meaningful, accurate insights, whether the goal is to evaluate supplier performance, benchmark sustainability metrics or uncover operational risks. Steps you’ll want to outline before you begin your ESG and supply chain audits include:

1. Define scope and criteria: Clarify what will be audited and why. This includes setting objectives, selecting relevant metrics and identifying which parts of the external supply chain and internal organization will be included in the review.
2. Develop the audit plan: Build a structured plan to guide how the audit will be conducted. Teams should align on responsibilities, timelines and how results will be captured to ensure consistency across all audit sites.
3. Collect and analyze data: Gather information using checklists, site visits, interviews and documentation reviews. Data must be captured in a standardized format to ensure reliability and support clear comparisons.
4. Report findings clearly: Translate the results into a concise, structured report. The goal is to surface issues and give internal teams and stakeholders the insight needed to take action.
5. Implement corrective actions: Identify specific follow-ups, assign ownership and establish deadlines for resolution. Progress should be monitored and documented to ensure improvements don’t stop at the report.

In practice, this might involve on-site audits at high-risk supplier locations, combined with standardized questionnaires and data reviews to compare performance across regions. Done well, audits create a feedback loop to move the needle forward, not just a snapshot of current circumstances. They help organizations strengthen internal controls, set clearer expectations with suppliers and make sustainability and risk goals more operationally grounded.

Creating a Comprehensive Supply Chain and ESG Audit Checklist

Audit criteria should go beyond surface-level compliance checks. To be effective, they need to evaluate how a company and its suppliers operate across core environmental, social and ethical dimensions. 

These categories guide what gets measured, what qualifies as risk and where changes need to be made. A thorough checklist helps companies meet reporting obligations and hold suppliers to meaningful standards.

Environmental Criteria

Environmental metrics capture how companies manage their resources, minimize environmental harm and adapt to climate-related risks. Criteria may include energy consumption, water usage, waste handling practices, pollution control and how materials are sourced and disposed of. These assessments provide critical insight into both compliance and longer-term sustainability alignment.

One of the most pressing challenges in environmental metrics is carbon reporting. While many companies track Scope 1 and Scope 2 emissions, most struggle with Scope 3. These emissions typically account for 70–90% of a company’s total carbon footprint, according to McKinsey estimates and GHG Protocol data, yet they remain the hardest to measure accurately. 

The 2025 MIT State of Supply Chain Sustainability Report found that roughly 70% of organizations cite a lack of supplier data as their primary barrier to getting this right. To address that gap, many organizations are turning to carbon assessment solutions that enable supplier-level emissions tracking and deliver reliable Scope 3 data to support internal targets and external reporting.

Social and Labor Practices

Social and labor audits evaluate how companies manage human rights risks across their value chains. Auditors look closely at working conditions, health and safety policies and how labor standards are upheld across regions and tiers. 

Forced labor and modern slavery are a critical focus – audits assess whether suppliers are screened for high-risk indicators, and whether remediation protocols exist when violations are uncovered.

The challenge is that compliance at Tier 1 does not guarantee compliance further down the chain. In some cases, audits have uncovered suppliers relying on subcontractors with poor working conditions, even when direct suppliers appeared fully compliant on paper. This is precisely why regulators are raising the bar. The EU’s CSDDD, amended under the Omnibus I package in early 2026, now requires large companies to conduct human rights and environmental due diligence not just across their direct suppliers but across their full value chains.

Meeting that standard requires more than intent. Companies must provide evidence of active due diligence, including documented risk assessments, worker grievance mechanisms and follow-through on corrective actions. These practices are essential to ensuring ethical sourcing and safeguarding worker well-being at scale.

Ethical Governance and Compliance

Governance audits evaluate how well a company enforces ethical business practices and complies with regulatory standards. This includes reviewing anti-corruption and anti-bribery policies, financial and ESG disclosures and supplier documentation. Audits may also examine board-level oversight, internal accountability structures and how companies handle conflicts of interest.

Transparency is a key focus at this level. Organizations must demonstrate that decision-making processes are traceable and that stakeholder input is acknowledged. Strong governance practices help reduce legal and reputational risks and support credible ESG commitment.

Supply Chain Risks and Vulnerabilities

Disruptions to the supply chain, be it from climate events, changes in regulations or geopolitical instabilities, can derail operations without warning. That’s why it’s essential to evaluate not just how a supply chain performs under normal conditions but how exposed it is when things go wrong. 

For most companies, that exposure is larger than they realize and the consequences of underestimating it compound over time. McKinsey estimates that supply chain disruptions lasting longer than a month now occur every 3.7 years on average and can cost businesses up to 45% of a year’s profits over the course of a decade.

Risk-focused audit criteria examine whether a company has mapped its supply base beyond tier 1, flagged high-risk suppliers or regions, and identified critical dependencies that pose a threat to business continuity.

Companies should also evaluate the presence and maturity of contingency plans. Is there a documented strategy for rerouting shipments, sourcing from alternate suppliers, or maintaining production during a shutdown? Are those plans tested and updated regularly?

A strong audit doesn’t treat risk as an abstract concept. It pinpoints where the vulnerabilities are and assesses whether they’re being actively managed. That visibility helps companies create robust supply chain risk management strategies and build the resilience needed to adapt in real time.

Supply Chain Performance Metrics

While sustainability auditing metrics are essential to a comprehensive supply chain audit, operational performance is often a core focus. This is especially true for companies looking to identify inefficiencies and control costs. 

Audits should include an evaluation of key performance indicators (KPIs) that reflect the health, speed and consistency of supply chain operations. Common KPIs include:

• On-time delivery rate
• Lead time reliability
• Inventory accuracy
• Cost variance and material waste
• Quality defect rates
• Capacity utilization
• Supplier responsiveness
• Logistics efficiency (i.e., route optimization or shipment consolidation)

These metrics give companies insight into where delays are happening, how well suppliers are meeting expectations and whether operational decisions are in line with strategic goals. When paired with ESG-focused criteria, they create a more complete picture of supply chain performance.

Best Practices for Supply Chain Audits 

Even the best audit programs face challenges when it comes to implementation. Data is often scattered across platforms. Suppliers may lack the capacity (or the incentive) to respond to audits with consistency or transparency. Internal teams can struggle to coordinate across functions, especially when audits span multiple regions or categories. These barriers are a signal that the audit process needs to evolve.

The following best practices help turn audit programs into engines of continuous improvement:

• Set clear, aligned objectives: Goals should be defined up front and tailored to business priorities. Aligning with ESG targets, risk exposure and compliance requirements helps ensure supply chain audits produce insight that teams can act on.
• Prioritize what matters most: A risk-based approach allows companies to focus on areas with the greatest potential impact, such as suppliers in high-risk regions, categories with past violations or operations tied to regulatory requirements.
• Protect audit independence: Findings only have value if they reflect reality. Whether audits are conducted by third parties or internal teams, objectivity and access are critical to ensure accurate, credible assessments.
• Follow through with structured action: Corrective action plans should include defined timelines, owners and expectations for follow-up. Progress must be monitored and enforced, not assumed.
• Leverage the right tools: Digital platforms provide supply chain mapping to centralize documentation, standardize audit scoring and make it easier to benchmark performance across suppliers and regions.

Of all these practices, the last one is often where the biggest gap exists between intent and execution. Many companies run audit programs that generate valuable data but store it in systems that procurement teams rarely access during sourcing decisions. The insight exists, but it never reaches the moment where it could actually change a decision. 

Lindt & Sprüngli addressed this by integrating EcoVadis data into its procurement systems, making sustainability insights available at the point of sourcing decisions rather than in a separate reporting tool. The result was improved supplier coverage, stronger risk visibility and an audit program that fed directly into commercial decisions rather than sitting alongside them. 

That integration is what separates audit programs that generate reports from those that drive decisions. EcoVadis operates at a scale most companies can’t replicate internally, with 150,000+ companies rated, coverage across 180+ countries and 250+ industries, and millions of supplier data points feeding into procurement decisions. 

If you’re trying to build comprehensive ESG oversight into your own supply chain, contact us to see how EcoVadis fits into your workflow.

FAQs

What does a supply chain audit checklist include? 

A supply chain audit typically covers the following areas:

• Environmental metrics such as emissions and water use
• Labor practices, including working conditions and health and safety
• Governance standards around ethics and anti-corruption
• Risk exposure across supplier tiers and geographies
• Operational indicators like delivery performance and inventory accuracy

The scope varies depending on the audit’s objectives and the regulatory frameworks in scope.

How do ESG audits support compliance?

ESG audits provide the structured, verifiable evidence that regulations like CSDDD and LkSG require companies to produce. Rather than relying on self-reported supplier claims, they generate documented assessments of environmental and human rights risks across the value chain. This creates an auditable record that demonstrates active due diligence to regulators, investors and customers who expect transparency beyond a company’s own operations.

What are common challenges in supply chain auditing?

Supply chain auditing is rarely straightforward. The most common barriers organizations face include:

• Limited supplier visibility beyond Tier 1, where many serious risks originate
• Inconsistent data from supplier self-assessments, makes reliable benchmarking difficult
• Cross-functional coordination across regions and business units that often operate in silos
• Corrective action tracking at scale, requiring dedicated systems and oversight
• Supplier fatigue from overlapping audit requests, reducing response quality and engagement