Rights-based Approach

A rights-based approach (RBA) is a framework that places human rights at the center of risk management, identifying rights-holders and duty-bearers. Originating from international human rights law and codified in the UN Guiding Principles on Business and Human Rights (UNGP), RBA shifts the focus from purely financial or operational risks to the impact of risks on people. In the context of ISO 31000 and ISO 22301, this means risk-adjusted decision-making must account for the rights of employees, customers, and vulnerable stakeholders. Unlike traditional risk management which prioritizes asset protection, RBA ensures that even during crisis response, fundamental rights—such as privacy (GDPR Art. 5) and workplace safety—are not compromised. This approach is increasingly demanded by international clients and regulators globally.

Implementation follows three practical steps: First, 'Rights-based Risk Identification'—mapping stakeholders and their rights (e.g., data privacy, physical safety) against enterprise risks. Second, 'RBA-integrated BCP Design'—ensuring Business Continuity Plans (BCPs) include specific measures to protect these rights during disruptions, such as secure remote working protocols that comply with the Taiwan Personal Data Protection Act. Third, 'Impact Monitoring'—using KPIs like 'RTO-related rights impact score' or 'supplier human rights compliance rate.' For instance, a Taiwanese electronics manufacturer implementing RBA during a supply chain crisis could be closely monitored by EU clients for compliance with the EU Corporate Sustainability Due Diligence Directive (CSDDD), where RBA-aligned BCPs provide a verifiable compliance advantage.

Taiwan enterprises typically face three challenges: 1) Regulatory Information Gap—many companies are unaware of the specific rights-based requirements in international standards like ISO 27701 or the EU's GDPR. Solution: Partner with specialized consultants for a 30-day regulatory baseline assessment. 2) Resource Constraints—RBA is often seen as an 'extra' cost. Solution: Integrate RBA into existing ISO 22301 or COSO ERM frameworks to maximize efficiency. 3) Cultural Resistance—leadership may view RBA as a HR issue rather than a risk management priority. Solution: Present RBA as a strategic tool for reputation protection and access to international markets. A 90-day roadmap starting with a gap analysis, followed by process integration, and ending with a pilot exercise is the most effective way to demonstrate ROI.

Winners Consulting Services Co., Ltd. specializes in Rights-based Approach for Taiwan enterprises, delivering compliant management systems within 90 days. Free consultation: https://winners.com.tw/contact