So all that's required would then just be to outsource it to a bunch of companies who then outsource it and then claim you have: "no knowledge"?
You're the one outsourcing, so it's your responsibility. The entire chain.
You're the one outsourcing, so it's your responsibility. The entire chain.
In other words, when a problem like this is discovered, the US State Department will assign more blame to the company if their attempts to avoid violating sanctions fell below a threshold; what is that threshold for the arts industry.
The same as you were employing them directly.
Do you have to check that the tablets, keyboards and mice used by your employees and those of outsourcing companies were not made in North Korea? Do you have to check that the ink used on the keyboards weren't made in North Korea? Do you have to check that the coal for the power station for the keyboard factory didn't come from North Korea?
Boeing used to make airplanes. Now they outsource the work of "make the airplanes" and all it cost them was their reputation.
Less outsourcing, more just doing the work please.
Think about exactly where this ends.
But sure, even in case of ore you have a responsibility to make sure it isn't being delved by slave labour.