New GNFR Due Diligence process launching in April

Supplier Actions

From 20 April 2023, JLP will operate a new third party risk management system which shall be administered internally by JLP, on Coupa. The redesigned approach aims to enhance the onboarding process in a number of ways:

Completing due diligence on Coupa will be free of charge to suppliers.
The number of questions has been significantly reduced. In total, suppliers will be asked fewer than half the number of questions previously asked.

Due diligence assessments provided by JLP’s former third party risk management provider, Hellios RSQS, will remain valid and continue to be honoured by JLP for up to one year from being issued. Therefore, if suppliers have already completed an RSQS using Hellios in the last year, they do not need to repeat this using the new Coupa platform until their annual renewal date is due, or until they start a new higher risk piece of work with JLP, whichever is sooner.

Despite this, Suppliers may continue to receive JLP renewal notifications from Hellios RSQS until 28th September 2023 during this period of system change over. To continue working with JLP after 28 September 2023, suppliers are not required to renew their details on Hellios RSQS and should use Coupa only. JLP will contact suppliers when it’s time to complete the new due diligence information on Coupa.

Process step	Inherent Risk Questionnaire	Sourcing	Due Diligence	Contracting	Action Plan
Who	JLP	Supplier(s)	Supplier(s)	JLP/Supplier(s)	JLP/Supplier(s)
Overview	A JLP Partner, the Business Contract Manager, will complete an Inherent Risk Questionnaire to ensure that the level of supplier due diligence is proportional to the risks inherent in the goods/service being purchased	As a supplier you will be asked a series of risk questions during the sourcing stage. This stage is designed to improve the selection of the supplier, and reduce the number of questions the supplier needs to complete later during due diligence.	The supplier(s) will then complete the supplier due diligence (SDD) stage. The new questionnaires have been tailored to meet the specific needs of JLP, and to suit the underlying risk in the goods/service being purchased.	Following due diligence, contracting commences. The due diligence process may highlight some additional clauses that need to be added to a contract to provide additional reassurance that risk is being managed effectively.	An action plan may be agreed between JLP and the supplier to manage and monitor ongoing risk. Ongoing monitoring of risk via the due diligence process will be conducted on an annual basis, with the due diligence questions being re-issued for review or completion.

Frequently Asked Questions

How will I know when it’s time to renew my JLP due diligence risk assessment?

JLP will contact you when it’s time to complete new due diligence on Coupa - either one year from the last assessment or when conducting new higher-risk business with JLP, whichever is soonest.

I completed due diligence via Hellios RSQS, is my risk assessment still valid?

Yes, Hellios RSQS assessments remain valid and continue to be honoured by JLP for one year from being issued or until you start a new higher-risk piece of work with JLP, whichever is soonest. JLP will contact you when it’s time to complete new JLP-related due diligence on Coupa.

I completed due diligence between 23 Jan - 20 April via Google Forms, is my risk assessment still valid?

Yes. Assessments submitted via a temporary Google Form remain valid for one year from due diligence being completed or until you start a new higher-risk piece of work with JLP, whichever is sooner. JLP will contact you when it’s time to complete new JLP-related due diligence on Coupa.

It’s almost a year since I last completed a JLP due diligence risk assessment and I’ve received an invitation to renew from Hellios RSQS. What do I need to do in relation to JLP supplier due diligence?

You may continue to receive renewal notifications from Hellios RSQS until 28th September 2023. But as JLP is no longer using Hellios RSQS to conduct new risk assessments, there is no need for suppliers to renew on Hellios RSQS in order to conduct business with JLP from this point on. JLP will contact you when it’s time to complete new JLP-related due diligence on Coupa.

Where can I find out more about completing risk assessments on Coupa?

Further information and guidance can be found on the JLP Supplier Help Portal.

Who do I contact if I have a question?

Suppliers can access the JLP Supplier Help Portal for help materials, which includes the ability to raise a query with the Finance Service Centre if you need further assistance.