YOUR DECISIONS AFFECT
Board
Workers at Jaya
Media/Public
Regulators
CA Transparency in Supply Chains Act (SB 657) — Interactive Investigation

The Tier-2 Problem

A journalist calls about your supplier. What you do next defines whether your modern slavery statement is worth the paper it’s printed on.

Friday, 16:42

The Last Call of the Week

Ashford Electronics, Los Angeles. Sarah’s last call of the week was supposed to be a 1-1 with David Chen on Q3 supplier reporting. Instead, an external number is calling.

Bloomberg San Francisco. Supply chain desk.

The number isn’t on the press list. They never call sales.

Case File MSA-2024-001 — Opening
16:45 — Three Minutes Later

“A comment by Monday 17:00.”

“I’ve got documents from a worker named Bharath at Jaya Precision Components. I’m running this on Tuesday. I’d like a comment from Ashford by Monday 17:00.”

Sarah ends the call. Her desk phone is still vibrating with an internal extension. She lets it ring.

How This Works

The Investigation

This is a supply chain investigation. You will be presented with evidence, make decisions, and face their consequences.

The Evidence Panel (left sidebar) tracks your case materials — documents, intelligence, and legal references accumulate as you progress. Review them before making decisions.

The Stakeholder Tracker (top-right) shows how your actions affect four groups: the Board, the workers at Jaya, the media, and regulators. Watch it shift after each decision.

There are no perfect answers. Every choice has a cost. Your final score reflects how well you balanced legal compliance, worker protection, and commercial reality.

Background Briefing
The Visibility Problem

Supply Chain Tiers

Modern supply chains are layered. Your contracts are with Tier 1 — your direct suppliers. But your Tier 1 suppliers buy from Tier 2 sub-suppliers, who buy from Tier 3 raw material providers.

Most companies audit Tier 1. Few audit Tier 2. Almost none audit Tier 3. This is where forced labor hides — in the layers you cannot see and have no contractual relationship with. The ILO estimates 27.6 million people are in forced labor globally. The majority are in private sector supply chains.

🏠
Ashford Electronics
HQ Los Angeles — direct control
You
🔍
Tier 1: Meridian Manufacturing (Shenzhen)
4 contract manufacturers — audited annually
Audited
Tier 2: Jaya Precision Components (Penang)
~40 component suppliers — mapped, not audited
❓ Unaudited
🚫
Tier 3: Raw material suppliers
Unknown — unmapped entirely
Unknown
Case File
Investigation Record
Ashford Electronics audits its 4 Tier 1 suppliers annually. Its ~40 Tier 2 suppliers are mapped but unaudited. Tier 3 is unmapped entirely. This is the industry norm. It is also the industry’s greatest liability.
Monday, 09:14 AM
The Phone Call

Grace Hartley, Wall Street Journal

Your desk phone rings. It’s Grace Hartley from the Wall Street Journal. She’s writing a piece on labor conditions in Malaysian electronics component manufacturing. She has photographs of worker dormitories at Jaya Precision Components — a company you’ve never audited but which supplies PCB assemblies to Meridian Manufacturing, your Tier 1 contract manufacturer in Shenzhen.

The photographs show 12-person dormitory rooms. Hartley says she has payslips showing deductions labelled ‘recruitment processing fee’ — between 3 and 6 months’ wages. She has interviewed three workers who say their passports are held by the dormitory supervisor.

She wants a comment from Ashford by Thursday.

Case File
Investigation Record
Jaya Precision Components Sdn Bhd, Penang, Malaysia. Supplies PCB sub-assemblies to Meridian Manufacturing (Shenzhen). Meridian is Ashford’s largest Tier 1 supplier — 34% of total component volume. Jaya does not appear in Ashford’s modern slavery risk register. No audit has been conducted.
Portrait of Sarah Lim
Sarah Lim
Supply Chain Compliance Manager
Recruitment fee deductions. Passport retention. Those are ILO forced labor indicators — not ambiguous ones.
Monday, 09:30 AM
ILO Forced Labour Indicators

The Framework

The ILO identifies 11 indicators of forced labor. One is a red flag. Multiple — as Hartley describes — constitute a strong presumption. Click the amber cards for the Jaya evidence.

Abuse of vulnerability
Exploiting migrant status
Restriction of movement
Cannot freely leave workplace
Isolation
Cut off from family
Physical and sexual violence
Violence used as control
Withholding of wages
Unauthorised deductions
Portrait of Sarah Lim
Sarah Lim
Supply Chain Compliance Manager
Six of eleven. Debt bondage, documents, intimidation, deception, conditions, overtime. Not borderline.
Monday, 10:00 AM
🔎 Investigation Decision 1 of 3

The First 24 Hours

Grace Hartley’s deadline is Thursday. You have photographs suggesting forced labor indicators at your Tier 2 supplier. David doesn’t know yet. What is your first action?

Your choice
📄
Brief the board immediately, instruct external counsel, and contact Meridian to request an emergency audit of Jaya
Full escalation. Board awareness, legal guidance, and direct action on the supply chain — simultaneously. You don’t wait for David.
Your choice
📞
Call David first — he manages the Meridian relationship. Ask him to contact Meridian and get their side before escalating
David knows Meridian best. Let him make the initial contact. You’ll escalate once you have both sides of the story.
Your choice
📁
Request a desk-based review of Jaya’s certifications and Meridian’s audit reports before taking any action
You need facts, not panic. Check what documentation exists. Jaya may have SA8000 or SMETA certification. Meridian may have already audited them.
Consequence
+15 Full escalation

Full Escalation

The board is briefed by lunchtime. Amira Osman, Ashford’s external counsel, calls at 2 PM: “Don’t contact Jaya directly. Contact Meridian, invoke your audit rights, and request an unannounced Jaya site visit within 72 hours. If Meridian refuses, that tells you everything.”

David resists: “We’ve worked with Meridian 8 years. We can’t just accuse them—” Amira: “You’re not accusing. You’re exercising your contractual right to audit a sub-supplier. If the code doesn’t give you that right, we fix that first.”

⚖ Legal Insight — The Contractual Leverage Question
Under California SB 657, in-scope retailers and manufacturers must disclose how they verify, audit, and require certification. Stopping at Tier 1 is increasingly inadequate to the AG and ESG raters. The 2015 AG guidance, UNGP, and forthcoming EU CSDDD all expect looking past direct suppliers. No sub-supplier audit rights = structural gap.
Consequence
+0 Time lost

David Handles It

David calls his contact at Meridian. The response: “Jaya is one of our approved sub-suppliers. They passed our internal assessment last year. We have no concerns.” David relays this to you. “See? Meridian says it’s fine.”

You ask David: “What did the assessment cover? Did it include worker interviews? Recruitment practices? Dormitory conditions?” David doesn’t know. He didn’t ask. He trusted the relationship.

You’ve lost 6 hours. Meridian now knows you’re asking questions — which means Jaya may know too. An unannounced audit is no longer unannounced.

⚖ Legal Insight — Supplier Self-Assessment Is Not Due Diligence
Relying on a Tier 1 supplier’s self-reported assessment of their sub-suppliers is one of the most common compliance failures in modern slavery due diligence. California SB 657 requires you to disclose — honestly — whether you conduct independent unannounced audits or rely on supplier self-certification. A ‘yes’ that is in fact a ‘no’ is the AG’s easiest enforcement target. A supplier saying ‘we have no concerns’ is not evidence of no concerns. It is evidence that the supplier has an incentive to report no concerns.
Consequence
−10 24 hours lost

Desk-Based Review

You spend Monday afternoon reviewing documentation. Jaya has no SA8000 or SMETA certification. Meridian’s last audit of Jaya was a questionnaire — 14 questions, all answered ‘compliant.’ No site visit. No worker interviews.

By Tuesday morning you have confirmed that Ashford has zero verified information about conditions at Jaya. The journalist’s photographs are the most detailed intelligence you have about a supplier that feeds 34% of your component volume. You have lost 24 hours and learned only what you should have already known: your Tier 2 due diligence does not exist.

Grace Hartley emails a follow-up: “I note Ashford’s modern slavery statement says you ‘conduct risk assessments across our supply chain.’ Can you confirm what risk assessment was conducted on Jaya Precision Components?”

Tuesday, 08:00 AM
Intelligence Gathering

Building the Picture

You have limited time. Investigate three of the five sources before Hartley’s Thursday deadline. Each reveals different information.

What you don’t investigate remains unknown.

Investigations remaining: 
 3
📄
Meridian contract review
Pull the master supply agreement. Check sub-supplier audit rights, code flow-down, termination clauses.
No right-to-audit clause covering Tier 2. Code of conduct not required to flow down. Termination requires 6 months’ notice — no fast exit.
🗣
Confidential worker outreach
Via Amira’s NGO contacts: confidential phone interviews with two ex-Jaya workers from the past 6 months.
Worker A (Nepali, 23): Paid MYR 8,400 (~$1,900) to a Kathmandu agent. Passport taken on arrival. Left after 14 months, still owes MYR 3,200. Worker B (Indonesian, 28): similar. Phones confiscated nightly at 10 PM.
🌎
Public registry and media search
Malaysian registry, labor enforcement records, media archives for Jaya.
Jaya Precision Components Sdn Bhd incorporated 2009. Two director changes 2022. No public enforcement actions. A 2023 Malay Mail story on Penang migrant-worker conditions mentions Jaya’s estate.
📊
Industry risk benchmarking
Global Slavery Index, KnowTheChain, ITUC Global Rights Index data on Malaysia electronics.
Malaysia rated ‘high risk’ for forced labor in electronics (Global Slavery Index). KnowTheChain 2023 ICT benchmark scores the sector 25/100. US CBP issued 4 Withhold Release Orders against Malaysian electronics in 3 years.
🔍
Meridian’s own audit reports
Request all Jaya audits Meridian conducted in the past 3 years.
Meridian provides one doc: a 2-page Supplier Self-Assessment, March 2023. 14 yes/no questions, all ‘Yes — compliant.’ No evidence, no site visit, no worker interviews. Doesn’t ask about fees, passports, or overtime.
Tuesday, 5:00 PM
Intelligence Assessment

What You Know — and What You Don’t

You review the evidence you’ve gathered. Some intelligence sources remain uninvestigated — that information is still unknown to Ashford. This is the reality of supply chain due diligence: you make decisions with incomplete information.

Portrait of Amira Osman
Amira Osman
External Counsel — Modern Slavery & Human Rights
You will never have a complete picture. The question regulators will ask is not ‘did you know everything?’ It’s ‘did you take reasonable steps to find out?’ What you chose to investigate — and what you chose to leave uninvestigated — tells the story of your due diligence.
Wednesday, 10:30 AM
Word Highlighting Activity

Reading Meridian’s Response

Meridian Manufacturing sends a formal written response. Read it carefully. Click on any phrase that raises a red flag — the rationalisations, deflections, and gaps. There are five to find.

Flags identified: 0 / 5
Dear Sarah, Thank you for your enquiry regarding Jaya Precision Components. We take all labor standards concerns seriously. Jaya is a long-standing supplier and we have never received any complaints about their operations. They were assessed as part of our annual supplier review process. Our assessment is based on a comprehensive self-certification questionnaire which covers all relevant labor standards. Regarding passport retention, this is common practice in the region for worker welfare purposes — to prevent loss or theft. We understand that dormitory accommodation is provided as a benefit to workers who would otherwise need to find their own housing. Recruitment fees are a matter between workers and their recruitment agents. Meridian does not involve itself in the private financial arrangements of sub-supplier employees. We are confident that Jaya operates in accordance with all applicable local laws. Regards, Li Wei, Quality Director
Wednesday, 2:00 PM
The Leverage Question

What Leverage Do You Have?

Amira calls. One question: what leverage does Ashford have over a Tier 2 supplier it has no direct contract with?

Portrait of Amira Osman
Amira Osman
External Counsel
Your contract is with Meridian. Meridian’s is with Jaya. Your leverage is indirect, through Meridian — and depends entirely on what your Meridian contract says about sub-suppliers.
Portrait of David Hargreaves
David Hargreaves
Head of Procurement
The Meridian contract doesn’t mention sub-suppliers. We buy finished assemblies. What they do upstream is their process.
Portrait of Amira Osman
Amira Osman
External Counsel
Under the CSDDD — applies to Ashford’s EU subsidiary from 2029 — that’s legally untenable. Due diligence runs the entire value chain. Even under SB 657, ‘no sub-supplier visibility’ is an admission, not a defense. The AG doesn’t need a fine to make that public.
Portrait of Sarah Lim
Sarah Lim
Supply Chain Compliance Manager
So we renegotiate the Meridian contract for sub-supplier audit rights. And Meridian has to cooperate — without them, we can’t reach Jaya.
Wednesday, 3:00 PM
Sequencing Activity

Response Sequencing

Amira recommends a structured response sequence. The order matters — doing things out of sequence creates legal and operational risks. Drag the steps to put them in the correct order, then check your answer.

Thursday, 4:00 PM
The Audit Findings

What the Auditors Found

An independent social auditor using ILO methodology conducts an unannounced visit to Jaya. 18 workers interviewed confidentially, off-site, in their first language, without management present.

FindingSeverityILO Indicator
Recruitment fees of 3–6 months’ wages paid to labor agents by migrant workersCriticalDebt bondage — Indicator #9
Passports held by dormitory supervisor. Workers must request access 48 hours in advanceCriticalRetention of identity documents — Indicator #7
Systematic overtime of 14–18 hours/week above legal maximum. Off-the-books — not reflected in payroll recordsSeriousExcessive overtime — Indicator #11
Payroll records show legal hours; worker interviews reveal significant discrepancySeriousDeception — Indicator #2
Workers report being told they will be ‘sent home’ (deportation threat) if they raise concernsCriticalIntimidation and threats — Indicator #6
Portrait of Amira Osman
Amira Osman
External Counsel
Three critical findings. Debt bondage, document retention, and intimidation. This is not a gray area. These are forced labor indicators under any framework — ILO, California SB 657, federal Trafficking Victims Protection Act. The question now is what Ashford does about it.
Thursday, 5:30 PM
The Decision Framework

Remediation vs. Exit

Amira walks you through the framework. This is the hardest decision in supply chain compliance — and the one most companies get wrong.

Portrait of Amira Osman
Amira Osman
External Counsel
Three options. Exit — cut the supplier. Remediate — stay and fix. Conditional — stay with hard deadlines. Most pick exit: fast, protectable in a statement. Exit has a cost that doesn’t hit any balance sheet.
Portrait of Amira Osman
Amira Osman
External Counsel
UNGP Principle 19: disengagement is a last resort. The EU CSDDD makes this a legal obligation from 2029. Cut a supplier and the workers are still there. Passports still held. Debts still owed. You’ve protected your supply chain. Not the people in it.
Portrait of David Hargreaves
David Hargreaves
Head of Procurement
It’s not our factory. Not our workers. We don’t even have a contract with Jaya.
Portrait of Amira Osman
Amira Osman
External Counsel
That’s the argument the MSA was designed to defeat. Your statement says you take responsibility for your supply chain. Exit without remediation and the next journalist asks: ‘You knew, and walked away. What happened to the workers?’
Friday, 9:00 AM
🔎 Investigation Decision 2 of 3

Remediate or Exit

The audit confirms forced labor indicators at Jaya. David wants to cut Jaya immediately — “we can’t be associated with this.” Amira warns that cutting the supplier without remediation may worsen outcomes for the workers. What do you recommend to the board?

Your choice
🛠
Stay and remediate: require Jaya to implement a corrective action plan — passport return, fee repayment program, independent monitoring — with a 90-day compliance deadline
Harder, slower, more expensive. But the workers are still there whether Ashford is or not. Remediation changes conditions. Exit changes your supplier list.
Your choice
Conditional exit: give Jaya 30 days to return passports and begin fee repayment. If they comply, stay. If not, exit and find an alternative supplier.
A middle path. Give Jaya a chance but with a hard deadline. If they won’t change, you leave.
Your choice
Immediate exit: terminate the relationship through Meridian, source alternative PCB assemblies, and update the modern slavery statement
Clean break. Remove the risk from the supply chain. Update the statement. Move on.
Consequence
+20 Remediation program

Remediation Programme

Ashford, Meridian, and Jaya agree a corrective action plan. Passports returned within 7 days. A recruitment-fee repayment program runs 12 months, funded jointly by Jaya and Meridian (Ashford contributes via a temporary price adjustment).

An independent monitor runs quarterly visits for 2 years. Off-site worker interviews. A confidential grievance hotline in Bahasa Malaysia and Nepali.

Cost to Ashford: ~$175,000 over 2 years. The alternative — a 60 Minutes segment titled ‘Ashford Electronics: modern slavery in the supply chain’ — costs far more.

⚖ Legal Insight — Remediation vs. Exit
UNGP Principle 19: where a company is linked to human rights impacts, it should use leverage to mitigate — not disengage. The EU CSDDD makes this a legal obligation from 2029. Disengagement is a last resort. Cutting a supplier without remediation protects the statement, not the workers.
Consequence
+5 Conditional exit

Conditional Exit

You give Jaya 30 days. Passports are returned within 10 days — a positive sign. But the fee repayment program stalls. Jaya’s management argues that recruitment fees were charged by independent agents, not by Jaya. They offer to ‘review’ the arrangement for future hires but will not reimburse existing fees.

After 30 days, the passport issue is resolved but debt bondage continues. You exit the relationship. Meridian finds an alternative sub-supplier within 6 weeks.

Portrait of Amira Osman
Amira Osman
External Counsel
You tried. The passport return is real progress. But the workers at Jaya still owe 3–6 months’ wages to recruitment agents. When Ashford’s orders leave, Jaya has less revenue and less incentive to address the fees. The workers’ position may worsen.
Consequence
−15 Immediate exit

Immediate Exit

David contacts Meridian. “We’re out. Find another PCB supplier.” Meridian complies — they have other customers for Jaya’s capacity. Within 4 weeks, Ashford’s orders are sourced from a different sub-supplier in Thailand.

Grace Hartley publishes her article. The paragraph about Ashford reads: “Ashford Electronics told the WSJ it had ‘terminated the commercial relationship’ with the supplier. When asked what remediation measures had been taken for the affected workers, Ashford did not respond.”

Portrait of Amira Osman
Amira Osman
External Counsel
Cutting the supplier is not remediation. The workers are still at Jaya. Their passports may or may not have been returned. The recruitment fees are still owed. Ashford’s modern slavery statement will now need to explain what steps were taken to address the impact — and ‘we left’ is not a step. Under the CSDDD, this approach would constitute a failure to mitigate.
6 weeks later
🔎 Investigation Decision 3 of 3

The Statement

Ashford’s annual modern slavery statement is due. The board wants to know what it should say about the Jaya incident. Amira has provided three drafts. Which do you recommend?

Your choice
📜
Full disclosure: describe the incident, the findings, the remediation actions (or exit), the systemic changes to Tier 2 due diligence, and the gaps this exposed in previous statements
Transparent. Acknowledges the failure. Describes what was done and what will change. The statement becomes evidence of a company that learns.
Your choice
👁
Substantive but anonymised: describe the incident type, findings, and remediation program in full detail — but do not name Jaya or Meridian while the corrective action plan is ongoing
Detailed and honest about what happened, but protects the identities of suppliers. Naming Jaya publicly could cause them to disengage from remediation entirely.
Your choice
🗐
Minimal update: add a paragraph about ‘enhanced supply chain monitoring’ to the existing statement template. No reference to any specific incident.
The statement stays clean. What happened at Jaya is an operational matter, not a disclosure matter. The statement covers policy and process — not individual incidents.
Consequence
+15 Full disclosure

Full Disclosure

The disclosure is 14 pages — the longest Ashford has ever published. It names Jaya, describes the audit findings, the remediation program (or exit and its limitations), and the systemic changes: Tier 2 supplier mapping, risk-based audit program, contractual right-to-audit clauses in all Tier 1 contracts, confidential grievance mechanism, and a commitment to annual reporting on remediation outcomes.

KnowTheChain rates Ashford’s SB 657 disclosure as ‘leading practice’ in its annual benchmarking. Two institutional investors contact Ashford’s CFO to say the transparency influenced their ESG assessment positively. Grace Hartley publishes a follow-up noting Ashford’s response as ‘the most substantive corporate response to supply chain labor abuse we have seen in the California electronics sector this year.’

Portrait of Amira Osman
Amira Osman
External Counsel
Full disclosure carries risk — Jaya’s management is furious. But the statement is now the strongest piece of evidence Ashford has that its due diligence system works. When regulators ask ‘what did you do?’, you have a 14-page answer.
Consequence
+10 Substantive but anonymised

Substantive but Anonymised

The statement describes ‘a Tier 2 supplier in Southeast Asian electronics manufacturing’ where forced labor indicators were identified through investigative journalism. It details the six ILO indicators found, the independent audit methodology, the corrective action plan structure, and the systemic changes to Ashford’s due diligence program. It does not name Jaya or Meridian.

The Business & Human Rights Resource Centre rates the statement as ‘good practice — substantive on process, limited on specificity.’ One institutional investor asks for more detail; Ashford provides it under NDA. Grace Hartley notes the statement is ‘more detailed than most — but stops short of the transparency that would set a precedent.’

Portrait of Amira Osman
Amira Osman
External Counsel
This is defensible. The CSDDD does not require naming specific suppliers — it requires demonstrating that appropriate measures were taken. The anonymisation protects the remediation relationship. But it also means Ashford cannot claim the full reputational credit for transparency. That is the trade-off — and it is a legitimate one.
Consequence
−15 Minimal update

Minimal Update

The statement reads almost identically to last year’s. ‘Enhanced supply chain monitoring’ is the only new language. Grace Hartley’s article is now 3 months old. An NGO compares Ashford’s statement to the WSJ article and publishes a blog post: ‘Ashford Electronics: the gap between statement and reality.’

The post is shared 2,400 times on LinkedIn. Ashford’s Head of Communications calls Sarah: “Why does our modern slavery statement not mention the thing the Wall Street Journal wrote about?”

Portrait of Amira Osman
Amira Osman
External Counsel
A modern slavery statement that omits a known, investigated, material supply chain incident is not a compliance document. It is a reputation risk. Under the CSDDD, this level of disclosure would be insufficient — the directive requires reporting on identified impacts and actions taken.
The Cascade

How Your Decisions Compounded

Your three decisions created a cascade. Each choice shaped the next — and the consequences compounded. Below is your path through the case.

Module complete. Continue when you're ready.
Investigation Rating — 80 possible