2021 Owens Corning Sustainability Report | Expanding Our Product Handprint | Supply Chain Sustainability | 125 In line with the Supplier Code of Conduct, in 2021, 100% of new suppliers were evaluated for these issues as well as environmental and social criteria (e.g., human rights and labor practices). Each requestor is also responsible for the completion of a cybersecurity form, which identifies whether the supplier will have access to any Owens Corning databases or technology. If the supplier will have access to our databases or technology, the Owens Corning cybersecurity group investigates, and they must approve the supplier before a vendor number will be assigned. Supplier Validation Process and New Supplier Selection All suppliers must be assigned a vendor number before they are entered in our supplier database. Suppliers are provided the Owens Corning Supplier Code of Conduct, and it is referenced during the request for proposal, contract creation, on-site evaluation, and self-evaluation. Owens Corning maintains the right to take actions to ensure that the Code is being followed by suppliers. These actions can include inspections of the supplier’s facilities and worker accommodations, as well as review of any applicable documentation. Suppliers are expected to keep accurate records to prove compliance with the Code. It is the expectation of Owens Corning that our suppliers will take corrective actions within a time frame jointly agreed upon by the supplier and Owens Corning to remedy any identified noncompliance. We may also review the financial health of potential and current suppliers to assure their ability to support Owens Corning. We conduct these reviews using the following resources: ■ Dunn & Bradstreet Credit Reports. ■ Lexis Nexis. ■ Market Research Reports. ■ Reference USA. These resources assist us in researching those companies that are new or current suppliers to Owens Corning. We also have a process in which we work with our treasury team to reach out to those suppliers that are not publicly held. This provides us with a financial risk score, assisting us in our selection decision. During the assignment process, each vendor is screened for any global or governmental sanctions using the Refinitiv World-Check system, a database established by Thomson Reuters to assess, manage, and remediate potential risks associated with individuals and organizations. Information is collated from an extensive network of reputable sources, including: ■ Over 530 regulatory, law enforcement, sanction, and watch lists. ■ Local and international government records. ■ Country-specific data sources. ■ International adverse electronic and physical media searches. ■ English and foreign-language data sources. ■ Relevant industry sources. Companies that are considered key suppliers in the manufacture of product — including raw materials, capital, and facilities — may be subject to either a self-assessment, an on-site survey, or both. Through these surveys, we can assess their overall business practices, facilities, safety and sustainability practices, and risk mitigation processes.