Report calls for a risk-based due diligence approach to inform business decisions