This whitepaper identifies the key foundations to consider when selecting products and services to collate, model, build, test and execute on your duty of care program. It is not intended to guide how you build policy and duty of care programs themselves, but to provide a framework when considering the products and services your programs will manifest in. You can draw parallels in this framework to similar frameworks for cyber, financial, operational, enterprise third-party and reputational resilience processes. This approach should be applied regardless of your program's maturity and apply frequent assessment and maintenance to ensure a right fit.