Hong Kong ESG update · Understand the current 2025–2028 reporting directionReview the timeline →
ESGNeed ESG Support?Hong Kong ESG Advisory Guide
Hong Kong container port and regional supply-chain infrastructure

ESG Guides › Sustainable Supply Chains & Procurement

Supplier risk, procurement controls and value-chain data

Sustainable Supply Chains & Procurement Guide

Move from one-off supplier questionnaires to a risk-based programme that influences selection, contracts, monitoring and improvement.


How to use this guide

This page explains a proportionate management approach for Hong Kong organisations. It is general information, not a substitute for legal, engineering, labour or other specialist advice where those disciplines are required.

When this topic matters

Supply-chain work becomes important when material emissions, labour risks, product quality, business continuity or customer requirements sit outside the reporting entity’s direct operations. It is also relevant when procurement teams receive inconsistent ESG questionnaires from customers or need evidence for tenders and investor due diligence.

What HKEX and stakeholders look for

The HKEX ESG Reporting Code includes supply-chain management within its Social subject area. It asks issuers to describe policies for managing environmental and social risks in the supply chain and practices used to identify and monitor those risks. The practical implication is that a supplier code alone is not enough: the company should be able to show how suppliers are prioritised, assessed, approved, monitored and escalated.

Hong Kong reference point

The HKSAR Government’s green procurement programme provides environmental specifications for 183 products and services across 24 categories. These specifications are not automatically private-sector requirements, but they offer useful local reference criteria for procurement teams developing their own minimum and desirable requirements.

Segment suppliers by risk, not only spend

A workable supplier-risk model combines commercial importance with the likelihood and severity of ESG impacts. Useful factors may include country and site location, sector, product or service, labour intensity, environmental footprint, substitutability, data access and previous incidents.

Example supplier segmentation
TierTypical profileProportionate response
PriorityHigh spend or critical supply with material environmental, labour, quality or continuity risk.Detailed assessment, contract clauses, evidence review, improvement plan and periodic monitoring.
FocusedModerate risk or material data relevance, including major Scope 3 contributors.Targeted questionnaire, document checks, training and selected KPI requests.
StandardLow inherent risk and limited business criticality.Supplier code, onboarding declarations and exception-based review.

Build ESG into the purchasing cycle

  • Define mandatory and desirable ESG criteria before tendering.
  • Include evidence requirements and avoid unsupported self-declarations.
  • Score relevant environmental and social factors alongside price, quality and delivery.
  • Use contract clauses for data, incidents, audit rights and corrective action.
  • Assign procurement owners for exceptions and approvals.
  • Review whether the specification creates unintended barriers for smaller suppliers.

Criteria should reflect the category. Energy performance may matter for equipment; recycled content and packaging for products; labour practices for labour-intensive services; and emissions data for logistics and manufacturing.

Engage suppliers and improve value-chain data

Supplier engagement should explain why information is needed, define the calculation period and boundary, provide a consistent template and distinguish primary data from estimates. Start with the suppliers and categories most likely to change the decision or reported result rather than asking every supplier for the same information.

Practical sequence

Screen first, request data second, validate a sample third, and then design improvement actions. Collecting more fields does not compensate for unclear boundaries or no management response.

Create escalation and evidence

Define what happens when a supplier does not respond, provides unreliable data, breaches a requirement or cannot meet an improvement deadline. Retain assessment records, approvals, supporting documents, changes in risk rating and the rationale for continuing, suspending or exiting the relationship.

Useful deliverables

  • Supplier ESG policy, code and responsibility matrix.
  • Category and supplier-risk segmentation methodology.
  • Prequalification questionnaire and evidence checklist.
  • Tender criteria, scoring approach and contract clauses.
  • Supplier-engagement and Scope 3 data programme.
  • Corrective-action, escalation and monitoring workflow.
  • Dashboard covering risk, response, incidents and improvement.

Questions to ask an adviser

  • How will you prioritise suppliers without creating an excessive questionnaire exercise?
  • How will the work connect to procurement approval and contract management?
  • Which evidence will be reviewed and how will limitations be recorded?
  • How will smaller suppliers be supported rather than simply excluded?
  • How will supplier information connect to Scope 3 and external reporting?

Official sources and useful references

Next step

Make supplier ESG requirements operational.

Start with the categories that carry the greatest business, emissions or social risk, then connect assessment results to procurement decisions and improvement actions.