Maxsight customers can now benefit from the new Forced labor risk assessment check that helps detect forced labor risks within third-party networks.

The check measures the risk of severe forms of labor exploitation, including forced labor, modern slavery, and human trafficking. It also measures the degree to which an organization may have a severe lack of resilience and capability to respond to these exploitation risks.

How it works

The Forced labor risk assessment makes use of Moody’s forced labor risk database as its data provider. 

The data provider uses the company custom check template.

Users must send a survey to their suppliers to be filled out. Data from the survey is then used to generate scores. A Forced labor risk score is provided along with a score for each component. The components are Business, Industry, and Country. Each component score is broken down into different risk category scores, which can each be further broken down into metric scores.

Details of the survey, including when it was sent, viewed, or submitted are provided as well as the data completeness level of the survey. Data completeness refers to the level of information available from the supplier survey when the check last ran compared to the information that was requested.

Country and industry reference scores are also provided. They indicate an organization's baseline risk score for country and industry.

Recommendations linked to each metric are presented. These recommendations offer guidance on how to mitigate risk in that area. 

Thresholds for the Business, Industry, and Country component scores can be configured in the data provider settings, causing the check to pass or fail based on the returned results.

Out of scope/future improvements

Product risk alerts

Using the new Forced labor risk assessment integration

If you’d like us to set this up for you, contact your Relationship Manager or fill out this form.

Helpful links

You can read more about our methodology here.

Maxsight customers can now view the newly designed Overview page for company profiles. The new Overview page summarizes the data and risk insights commonly accessed by users on the Profile management tab.

How to access the page

When you are viewing a company’s profile page, a banner appears at the top alerting you to the new Overview page. Choose the Go to the new Overview page link or disregard the message and continue viewing the current profile data.

What is included on the new Overview page?

The snapshot provided by the Overview page contains widgets that summarize identifying data, application status, and key risk drivers for a single entity. This snapshot unifies available datasets into one view, so that the user can review entity data and risk information all from this page. 

We have prioritized the following data for this Overview page release:

• Profile information (including up to 9 custom fields)
• Application risk scores 
• Application tasks
• Ownership information
• Financials, when the Assess financials task is added
• Recent activity

On February 5, 2025 we moved to new URLs in support of Moody's Maxsight. To learn more about these changes, visit our website.

The following URLs have changed:

Login access

Note that you have been automatically redirected to the new URLs.

Data collection

Note that Collection URLs are redirected automatically.

API access

Note that there is no redirection for the API; both addresses will work for a period.

Support

Reach out to the Client Service team if your organization is experiencing any issues or you have any questions about this change. 

Note that your organization’s IT policy may have impacted your ability to access the new domains. 

We’ve made it easier to see what changed when Moody’s Orbis monitoring updates one of your company profiles. This improvement helps you quickly take action on company data tasks that are placed back in review by our monitoring system.

Background

When using the Moody’s Orbis integration with monitoring, company profiles are placed back into the Review status when there are certain updates to the Orbis data. All of the company data tasks are expired and new versions of the tasks are created. These profiles may require manual completion and will appear in the list of profiles needing attention.

Read more about monitoring on our help site.

Customers told us that finding out which data points caused a profile to be placed back into review was difficult and time-consuming.

What’s changed

When you open a task that needs manual intervention, you’ll see a banner indicating a monitoring update.

You can use the view updates button to see the last ten updates to the monitored task, including information about which data points changed and the old and new values.

If you open one of the expired tasks, you will see a banner inviting you to view the newer version of the task.

Get started

This update will be available to all users of the latest Moody’s Orbis integration upon release. You will see it in the portal soon. If you have any questions, visit our help site or get in touch with our Client Service team.

You can now directly use data returned by data providers to automatically populate custom fields used as risk factors, reducing the need for manual input and ensuring that risk scores are calculated automatically.

Key Benefits

• Automatic data population: Custom fields are automatically populated with data from your data provider and used in risk scoring.
• Efficiency: Get a faster, fully calculated risk score without missing data.
• Data source identification: Easily identify fields populated by provider data, which are marked as Automatically entered.

How it works

• Get in touch with your implementation specialist who will create and configure a new custom field that can be auto-populated with data returned by your data provider.
• When the check runs, the data specified in the custom field configuration will auto populate the custom field.
• In the risk page, you’ll be able to see the source of where the data came from for a specified custom field, whether it was entered manually or automatically.
• When there is new data available, for example when the entity is being monitored, the fields are automatically updated with the latest data.
• You can manually edit custom fields. However, note that once a field is manually overwritten, it will not auto-populate with new provider data, even if updates are received.

Getting started

• Get in touch with your implementation specialist to get this up and running.

You can now ensure that associate roles in the Assess company ownership task no longer contribute to the company’s risk score.

Removing an associate's role from the company profile automatically cancels or rejects the product application for that role and severs the role’s relationship to the parent company, ensuring it isn't factored into the company’s risk score.

Associates with all roles removed from the company’s profile in the Assess company ownership task don’t appear in the Removed tab, but you can still access their profiles and applications by selecting the associate’s name in the company profile's audit report item that's generated when a role is removed.

How it works

• You now have an edit associate view in the Assess company ownership task where you can remove a role from the company profile (new) or remove a role from the verification list (existing).
• In the edit view, you can see the roles that have been removed from the verification list but still contribute to risk score. From here you can add them back to the verification list or remove them from the company profile.

• Removing from the verification list indicates that the associate role no longer needs verification and approval, moving the role’s product application to canceled or rejected. However, the removed role still contributes to the company’s risk score.
• Removing from the company profile severs the associate role's relationship to the parent company, ensuring it isn't factored into the company's risk score. This also moves the role’s product application to canceled or rejected.

Important information

If you remove an associate role from the company’s profile in the Assess company ownership task, but that associate still holds a role in any other task, for example the Officers task, that role might still contribute to the company’s risk score if that’s how your risk policy is set up.

Out of scope

• Being able to remove roles from the company profile in other associate tasks.

Read more about it in our help page.

What's changed?

Users can now see and search for custom fields as column options in the column selection drop-down of the Profiles list.

All custom fields that meet the following criteria will be available as column options in the Profiles list:

• Not marked as “Hidden” in the configuration of the custom field
• Of type: Single select, Text, Country, Number, Currency, Boolean (True/False), Date

Users will also be able to save Profiles list views containing custom fields and share them with their organization for ease of access.

To learn more about custom fields and/or saving views in the Profiles list, please consult our help articles: 

• About custom fields 
• Create custom profile views and share them with your organization 

We have updated the Risk score page with a fresh design and additional information to get ready for an upcoming project involving leveraging provider data in risk.

For those using custom fields as risk factors in their risk model, you can now see its description and data source. These will help distinguish between custom fields that were manually entered and those populated by the data provider. Currently, only manually entered values are supported as the data source, which can be from an API response, a form submission, or manual data input by a user.

Read more about it on the help page.

Having migrated our SSO sign in services to Moody's SSO in November 2023, we are removing access to a legacy domain, sso.passfort.com, associated with our previous SSO sign in.

If you sign in to Passfort using SSO, please ensure you are accessing the platform using your correct URL:

• EU environment: https://identity.passfort.com
• UAE environment: https://identity.uae.passfort.com
• US environment: https://identity.us.passfort.com

You can find your assigned website and other sign in details in your initial email from the Solution Delivery team or by contacting your account administrator. Contact our Client Service team if you're unsure who your administrator is.

View more information on our sign in process.

We’ve made some performance improvements to how we calculate risk for companies and their associates. Broadly, these improvements:

• Improve efficiency of calculating risk across a company and its associates
• Have no impact on users
• Have some potential impact on how you use the ‘product badge changed’ webhook if you use it to track the application status of associates

We’ll be rolling out this improvement in two phases:

Phase 1 - For customers who don’t use the ‘product badge changed’ webhook for company applications

Institutions meeting the following criteria will have the performance improvement enabled by Friday 8 November 2024:

• Institutions not subscribed to the ‘product badge changed’ webhook
• Institutions who are subscribed to the ‘product badge changed’ webhook but don’t onboard company profiles

Phase 2 - For customers who use the ‘product badge changed’ webhook and onboard company profiles

We will send a separate announcement with more details for customers who use this webhook and onboard company profiles in mid-November. We are targeting enablement for those institutions by the end of Q1 2025.

Get in touch with our Client Service team if you have any questions.