An ongoing risk management process that a reasonable and prudent company needs to follow in order to identify, prevent, mitigate and account for how it addresses its adverse human rights impacts. It includes four key steps: assessing actual and potential human rights impacts; integrating and acting on the findings; tracking responses; and communicating about how impacts are addressed.