This reflection aims to investigate the integrity-related risks for companies engaging with third parties in the construction and civil engineering industry. The business partner compliance process of a multinational construction engineering company is assessed through internal interviews with integrity officers per business sector and per region in a static and dynamic strategy framework. The actual process is the internal evaluation of a ready-made tool bought from a service supplier that assess how the risks related to corruption are covered in order to determine the level of due diligence necessary when This material may be downloaded for personal use only. Any other use requires prior permission of the American Society of Civil Engineers. This material may be found at https://doi.org/10.1061/(ASCE)LA.1943-4170.0000435. engaging with a specific third party. This study finds that companies must involve their own experts to improve integrity tools. Collecting expert opinions on risk is necessary to allow an improved understanding of the scope of the tool. This study reflects on new ways for improving the integrity tool and demonstrates the necessity to cover risks not solely associated with Corruption & Bribery, but also with Human Rights, Conflict of Interest, Antitrust & Competition, as well as Compliance with Regulations to fully protect company's integrity.

This paper aims to propose a methodology for conducting third-party risk-based due diligence in an engineering and construction company. A case study will present the methodology for a multinational firm. Due diligence is necessary and often mandatory, depending on the client or project. It protects a company in case of an ill-intentioned third-party conducting misconduct while under contract or relationship with the company, but has been overlooked in many industries, resulting in ethics and compliance-related misconduct. This study reveals that risk-based due diligence methodology has been widely applied and discussed by brokers and accountants, but that no research has verified whether the methodology applies to the construction and engineering industry. The case study also highlights the importance of knowing and understanding the company's business model, its appetite for risk, and its global interactions within its industry. The proposed methodology enables risk assessment and due diligence covering integrity-related risks among third parties. By adapting the model to their reality, construction and engineering companies Authors' accepted manuscript.