ISO 20400 sustainable procurement introduction guidance｜Startrust

From supplier questionnaires to procurement decisions, let sustainability requirements truly enter demand, selection, contract and performance management

Most of the environmental, social and operational risks of enterprises often occur not only in their own locations, but also in raw materials, components, equipment, engineering, logistics, outsourcing and service supply chains. If sustainability management is only conducted by the ESG team through questionnaires but does not enter into procurement strategies and daily decision-making, it will be difficult to translate supplier information into risk reduction or performance improvement.

ISO 20400 provides guidance for organizations of all types and sizes to integrate sustainability into procurement. It focuses not just on supplier scoring, but starts with governance, policy and category strategy, and extends to demand confirmation, specifications, supply market analysis, selection, contracts, supplier relationships and performance management.

Startrust assists companies to take inventory of procurement systems in accordance with ISO 20400, identify high-risk and high-impact categories, convert environmental, human rights, labor, safety, business ethics and governance requirements into enforceable procurement conditions, and establish supplier classification, information, review, improvement and cross-departmental decision-making processes.

Establish sustainable procurement policies, governance and cross-departmental responsibilities
Risk classification by category, region, expenditure and impact
Incorporate sustainability requirements into requirements, specifications, inquiries and selections
Establish supplier guidelines, contract terms, grievance and redress mechanisms
Improve purchasing decisions based on life cycle cost and overall value
Establish supplier performance, improvement, audit and exit processes

Reservation consultation

Why do companies need to introduce ISO 20400 sustainable procurement?

Supply chain risks will directly affect operations and brands

Gaps in suppliers’ labor, human rights, environment, occupational safety, quality, integrity and information management may lead to work stoppages, delivery delays, litigation, customer loss and reputational risks. Sustainable procurement can incorporate these issues into daily business decisions.

Customers and investors require evidence of value chain management

What companies are required to explain is no longer just “whether there is a supplier code of conduct”, but how to identify major suppliers, what conditions are required, how to monitor, what problems are discovered, and how to improve and remedy them.

The lowest price does not necessarily represent the lowest total cost

In addition to the purchase price, costs may arise from energy and consumables, maintenance, breakdowns, transportation, scrap, pollution, labor disputes and supply interruptions. A life cycle and holistic value perspective help avoid leaving risk until after the contract is executed.

Questionnaires and audits need to clarify risk priorities

Using the same long questionnaire or the same audit frequency for all suppliers easily consumes resources but has no management effect. Companies should be graded based on category impact, origin, spending, substitutability, supplier capabilities and past events.

Procurement has the real impact to drive supply chain improvements

If sustainability requirements can be incorporated into specifications, selection weights, contracts, orders, contract renewals and supplier development, companies will have clear incentives and resources to promote changes in suppliers.

What is ISO 20400?

ISO 20400:2017 is a sustainable procurement guideline that helps organizations integrate sustainability into procurement policies, strategies, organizations and processes. ISO will complete a systematic review in 2023 and confirm that this version continues to be valid.

Suitable for organizations of all types and sizes

Regardless of whether a business, government, school, medical institution or non-profit organization engages in procurement and outsourcing, it can adjust its approach based on its size, risks and resources.

ISO 20400 is a guideline, not a universal verifiable management system

ISO 20400 is not designed as a general third-party verification requirement like some management system standards. There may be maturity assessment, verification or declaration services on the market, but companies should confirm the basis of the plan, the scope of the assessment and the significance of the certification, and cannot directly equate the introduction of guidelines with obtaining an ISO management system certificate.

Can be integrated with ISO 26000 and other systems

ISO 20400 is based on the principles of social responsibility and can be integrated with ISO 14001, ISO 45001, ISO 37001, responsible minerals, RBA, EcoVadis, supply chain due diligence and existing corporate procurement systems.

What core principles should be included in sustainable procurement?

Accountability and Transparency

Purchasing decisions need to have clear responsibilities, approvals, standards and records, and provide appropriate transparency while protecting commercial confidentiality.

Ethical Conduct and Fair Opportunity

Avoid conflicts of interest, bribery, unfair competition and improper differential treatment, and establish an understandable and consistent selection and grievance mechanism for suppliers.

Respect human rights and stakeholders

Identify the actual and potential impacts of procurement activities on labor, communities, consumers and other stakeholders, and establish prevention, mitigation and remediation methods.

Comply with regulations and international codes of conduct

In addition to local regulations, cross-border supply chains may also face customer, market and international regulatory requirements. Enterprises need to establish applicable obligations and update mechanisms.

Full life cycle and overall cost

Evaluate environmental, social and economic value from raw materials, manufacturing, transportation, use, maintenance to end of life, rather than just comparing the initial purchase price.

Risk and opportunity orientation

Dedicate resources to high-risk, high-spend, high-impact or high-potential-for-improvement categories and work with suppliers to develop innovation, efficiency and resilience opportunities.

How to incorporate sustainability into the procurement process?

1. Planning and demand confirmation

First determine whether the demand is necessary, whether it can be reduced, extended use, shared, repaired, or purchased with services, and then define functional and performance requirements to avoid wasting resources caused by over-specification.

2. Category and supply market analysis

Take inventory of expenditures, suppliers, origins, substitutability, criticality and sustainable impacts to understand whether there are qualified products, services and supply capabilities in the market.

3. Specifications and supplier qualifications

Incorporate verifiable and subject-relevant environmental, social and governance conditions into technical specifications, qualifications and documentation requirements, and avoid using slogans that are immeasurable or disproportionate.

4. Inquiry, selection and decision-making

Set sustainability selection items, weights, thresholds, evidence and scoring criteria, and combine price, quality, delivery time, technology and total cost to form traceable decisions.

5. Negotiation and contract management

Convert important commitments into contract terms, KPIs, information provision, audit rights, notifications, corrective actions, remedies and termination conditions, and confirm responsibilities and implementation feasibility.

6. Supplier performance and relationship management

Setting the frequency of questionnaires, meetings, performance evaluations, audits, education training and improvement based on risk and importance can promote joint innovation and capacity building for strategic suppliers.

7. End of contract and continuous improvement

Evaluate contract renewal, exit, asset disposal, data transfer and responsible exit, and feed back actual performance and events to the next round of category strategies and procurement specifications.

Which companies are suitable for priority import?

Enterprises with a large number of suppliers, high procurement expenditures or complex cross-border supply chains
Manufacturers whose customers require supplier ESG questionnaires, audits or sustainable procurement systems
Enterprises with high-risk raw materials, outsourcing, contracting, logistics and human resources services
Businesses driving net zero, circular economy, human rights, responsible minerals or supply chain resilience
Companies that have established supplier assessments but lack risk grading and improvement tracking for sustainability projects
Companies preparing for EcoVadis, RBA, GRI or other assessment and disclosure requirements
Public sector, schools, medical and legal entities wishing to bring policy objectives to purchasers
An organization that needs to establish common procurement principles for the group and implementation standards for public institutions

Companies can start by piloting one to three high-risk or high-spending categories and then expand based on results, without having to rewrite all procurement specifications at once in the first year.

What information do I need to prepare?

Procurement governance and system documents

Including procurement policies, procedures, authorities, supplier guidelines, bidding and selection rules, contract templates, conflicts of interest and grievance mechanisms.

Spend, Category and Supplier Information

Including purchase amount, category, supply source, country, criticality, substitutability, supplier size, performance and major events, used to build risk and opportunity map.

Sustainability goals and risk information

Including carbon emissions, water, materials, human rights, occupational safety, anti-corruption, responsible minerals, information security and regulatory requirements to identify which issues should be entered into different categories.

Procurement case and contract sample

Select actual needs, specifications, inquiries, selections, negotiations and performance documents to check whether sustainability requirements are relevant, measurable, verifiable and enforceable.

Supplier performance and improvement record

Including questionnaires, certificates, reports, audits, KPIs, deficiencies, corrective actions, complaints and termination information, used to evaluate the current management depth and evidence quality.

How to establish supplier risk classification?

Enterprises can first establish grading from two levels: “category inherent risk” and “supplier management risk”.

Category inherent risks

Consider the environmental and social impact, origin, labor intensity, critical raw materials, regulations, expenditures, substitutability, supply concentration and life cycle risks of the product or service.

Supplier Management Risk

Consider supplier policies, systems, performance, data quality, major events, audit deficiencies, improvement capabilities and cooperative attitude.

Commercial importance and corporate influence

High risk does not necessarily equate to immediate exit. Companies also need to evaluate the importance of supply relationships, the difficulty of switching, the volume of purchases, and whether they can increase their influence through contracts, joint improvements, or joint actions.

Hierarchical corresponding management measures

Different levels should be linked to different questionnaire depths, evidence, audits, performance meetings, improvement time limits, approval levels and exit conditions, so that the levels can truly change the management method.

Common sustainable procurement issues faced by enterprises

Sustainable procurement is only driven by the ESG department

The ESG team made the request, but the procurement specifications, selection, contract and contract renewal remained unchanged, and the suppliers lacked incentives to implement them.

All suppliers use the same set of questionnaires

Problems were not adjusted according to category and regional risks, resulting in an excessive burden on low-risk suppliers, while high-risk suppliers were not thoroughly inspected.

Only look at the certificate, without confirming the scope and performance

Certificates may only cover some sites, activities or periods, and may not answer all human rights, environmental and governance issues. The scope of application, effectiveness and actual performance need to be confirmed.

Perpetuity clause is overly general

The contract only requires “compliance with ESG” or “compliance with sustainability”, but does not define information, KPIs, reporting, auditing, improvement and consequences of breach of contract, making it difficult to implement in practice.

There is no connection between selection weight and decision-making

Although the sustainability question is set, the score is too low, no threshold is set, or it can be completely offset by the lowest price, so that major risks do not enter the decision-making process.

Only calculate purchase price

Ignoring usage, maintenance, energy, downtime, scrap and risk costs, you may choose an option that is cheaper initially but has higher life cycle costs.

There is no root cause and improvement for audit deficiencies

The supplier submits photos or documents and the case is closed without confirming the root cause, scope of impact, effectiveness of recurrence prevention and improvement, and the problem is easy to be repeated.

Asking suppliers to improve but failing to adjust their own purchasing behavior

Short delivery times, frequent changes, low prices or unreasonable orders may increase working hours, occupational safety and subcontracting risks. Sustainable procurement also requires examining the impact of the buyer’s own decisions.

How does Startrust help enterprises introduce ISO 20400?

1. Current situation and gap analysis

Interview procurement, sustainability, legal, quality assurance, environmental safety, finance and demand units, and review policies, procedures, data and actual procurement cases.

2. Procurement governance and policy design

Establish sustainable procurement commitments, principles, roles, decision-making and upgrade mechanisms to connect corporate sustainability goals and procurement performance.

3. Expenditure, Category and Risk Analysis

Integrate procurement data and sustainability risks to establish priority categories, supplier classification and differentiated management strategies.

4. Procurement process and tool integration

Embed requirements into requirements, specifications, inquiry, selection, negotiation, contract, acceptance, performance and renewal forms and procedures.

5. Supplier Code and Due Diligence

Design supplier code of conduct, questionnaires, evidence, complaints, audits, risk identification and remediation processes, and connect them with responsible minerals, RBA and other requirements.

6. Life cycle cost and pilot

Select categories for case trial calculations, including use, maintenance, energy, end-of-life and risk costs in addition to price, to verify the decision-making approach.

7. Performance, Improvement and Supplier Development

Establish KPIs, scorecards, improvement actions, capability building and strategic supplier cooperation mechanisms, and confirm the effectiveness of improvements.

8. Internal training and continuous updates

Provide scenario and case training for procurement and demand units, and establish annual review, regulatory updates and pilot expansion routes.

Coaching content and deliverables

The actual delivery content is confirmed based on the enterprise size, category, number of suppliers and system maturity. Common results include:

ISO 20400 current status and gap analysis report
Sustainable procurement policy, governance structure and cross-departmental RACI
Spend, category, region and supplier risk maps
Matrix of priority categories, supplier classification and management measures
Supplier Code of Conduct and Communication Documents
Design guidelines for sustainable requirements and technical specifications
Inquiry, qualification, selection, weighting and evidence templates
Suggestions on perpetual contract terms, KPIs, reporting and audit terms
Life cycle cost and overall value assessment model
Supplier questionnaire, evaluation, audit and improvement process
Grievance, redress, escalation and responsible exit mechanisms
Management dashboards, KPIs and management review data
Pilot category execution record and expansion roadmap
Education and training materials for purchasing personnel and demand units

ISO 20400 is a guideline. If the enterprise has other customer assessment, maturity assessment or specific verification needs, it should confirm the scope, method and result significance according to the designated plan.

What can companies get after importing?

Sustainability goals enter actual purchasing decisions

A company’s carbon, human rights, recycling, integrity and supply chain resilience goals can fall into specification, selection, contract and performance management.

Management resources are allocated according to risk

High-risk and high-impact categories receive more in-depth investigations, audits and improvements, while low-risk suppliers adopt a leaner approach.

Procurement decisions are more complete and traceable

Price, quality, delivery, sustainability risks and life cycle costs are evaluated using clear standards to reduce personal judgment and subsequent disputes.

Supplier improvement forms a closed loop

Problems are recorded from identification, root cause, action, deadline, evidence to validity confirmation to avoid repeating the same mistakes every year.

There is institutional evidence for external disclosure and evaluation

Enterprises can extract policies, coverage, performance and improvement results from daily procurement data to support sustainability reporting, EcoVadis, customer audits and other needs.

Why choose Startrust?

Convert ISO guidelines into procurement workflow

We help companies put principles into actual forms, weights, contracts, responsibilities and decisions, not just complete policy documents.

Tandem Supplier Risks and Multiple Sets of Requirements

Responsible minerals, RBA, EcoVadis, carbon management, human rights and environmental systems can be integrated to reduce repeated reporting by suppliers.

Understand the implementation difficulties of buyers and suppliers at the same time

The requirements will consider the category market, supplier scale, data acquisition and corporate influence to make the system feasible and proportional.

Expand after pilot verification

Select high-risk or high-spend categories to test specifications, selection and performance methods first, then adjust and expand based on results.

Can be connected to supplier data management

The supplier management module centralizes questionnaires, evidence, classification, auditing and improvement to improve the efficiency of annual updates and management reviews.

FAQ

Can ISO 20400 obtain an ISO verification certificate?

ISO 20400 is a sustainable procurement guideline, not a requirement standard generally used for third-party management system verification. There may be assessment or verification services on the market, but the provider, method, scope and certification significance need to be confirmed and cannot be confused with the ISO management system certificate.

Are small and medium-sized enterprises also suitable for import?

Suitable. Small and medium-sized enterprises can start with major customers, high-spending or high-risk categories, and adopt streamlined policies, classifications, contracts and improvement processes, without having to establish complex systems at the level of large enterprises at once.

Does sustainable purchasing mean that we can only purchase higher-priced products?

no. Sustainable procurement assesses overall value and life cycle costs, including use, energy, maintenance, risk and end-of-life. Some solutions have a higher initial price but a lower total cost, and may also reduce expenses at the same time through volume reduction, demand management and efficiency improvements.

Are on-site audits required for all suppliers?

Usually not required. High-risk situations should be graded based on category, region, supplier performance, major events, and data quality, and more in-depth remote or on-site inspections should be used for high-risk situations.

The supplier already has an ISO certificate, do I still need to fill in the questionnaire?

It depends on the topic and scope. Valid certificates serve as partial evidence of management capabilities but may not cover all locations, products, human rights, integrity or procurement issues. Enterprises can reduce duplication of questions and supplement information for actual gaps.

How to avoid excessive burden on suppliers due to sustainability requirements?

Conduct a risk and applicability analysis first, reuse credible evidence, set reasonable questions and deadlines based on the supplier’s size and risk, and clearly explain the purpose. Training and joint improvements can be provided to strategy suppliers. It is not advisable to just add forms.

How much weight should sustainable performance account for in supplier selection?

There is no fixed ratio that applies to all categories. Weights and thresholds should be set based on the severity of the issue, regulations, customer requirements, supply markets and corporate risk tolerance. Qualification thresholds may also be used instead of general weighting for significant forced labor or integrity risks.

How to connect existing supplier evaluation with ISO 20400?

The original quality, cost, delivery time and service structure can be retained, category risks, sustainability evidence, contract requirements, improvement and remediation mechanisms can be added, and the results can be confirmed to affect procurement decisions and supplier development.

If a company hopes to bring sustainability from supplier questionnaires into purchasing decisions, Startrust can assist in selecting pilot categories, taking stock of gaps and establishing the first version of the system.