Supply Chain Risk Management

---
name: supply-chain-risk
description: "Identify, assess, and mitigate supply chain risks across tiers using mapping, scenario analysis, multi-sourcing, safety stock, and control towers to protect continuity."
metadata:
  tags: "enterprise-operations, supply-chain, risk-management, disruption-management, scenario-analysis, multi-sourcing, control-tower"
  source: "https://skilldb.dev/skills/supply-chain-skills/supply-chain-risk"
  pack: "supply-chain-skills"
  category: "Enterprise & Operations"
---

# Supply Chain Risk Management

## When to use this skill
Use when the user says things like:
- "Map my supply chain end-to-end for risk."
- "Run disruption scenario analyses for suppliers."
- "Identify alternate suppliers and safety stock needs."
- "Set up a supply chain control tower and alerts."
- "Create a business continuity plan for disruptions."


## Core Philosophy
Supply chain risk management proactively identifies vulnerabilities and builds
resilience before disruptions occur. Every supply chain faces risks — natural
disasters, supplier bankruptcy, geopolitical instability, demand shocks, quality
failures — and the question is not whether disruption will happen but when. The
goal is to design supply chains that can absorb shocks, adapt to changed conditions,
and recover quickly while maintaining service to customers.

## Key Techniques
- **Risk Mapping**: Visualize the end-to-end supply chain including tier 2 and
  tier 3 suppliers to identify hidden concentration risks and single points of
  failure.
- **Scenario Analysis**: Model the impact of specific disruption scenarios on
  supply continuity, revenue, and customer service to prioritize mitigation
  investments.
- **Multi-Sourcing**: Qualify alternative suppliers for critical materials and
  components to enable rapid switching when primary sources fail.
- **Safety Stock Buffers**: Hold strategic inventory of critical components with
  long lead times or limited supply alternatives.
- **Supply Chain Control Towers**: Real-time visibility platforms that monitor
  supply chain events, flag anomalies, and enable rapid response.
- **Business Continuity Planning**: Documented response plans for specific
  disruption scenarios with assigned roles, communication protocols, and recovery
  procedures.

## Best Practices
- Map beyond tier 1 suppliers. Many disruptions originate at tier 2 or tier 3
  where you have no direct relationship or visibility.
- Quantify risk in financial terms. Revenue at risk and recovery time are more
  actionable than probability matrices.
- Test continuity plans through tabletop exercises and simulated disruptions.
- Monitor leading indicators (supplier financial health, geopolitical tensions,
  weather patterns) rather than waiting for disruptions to occur.
- Balance efficiency and resilience deliberately. Pure cost optimization creates
  fragile supply chains.
- Build relationships with alternative suppliers before you need them.

## Common Patterns
- **Dual Sourcing with Primary/Secondary Split**: Allocate 70-80% of volume to
  a primary supplier and 20-30% to a secondary to maintain qualification and
  capacity readiness.
- **Regional Diversification**: Source critical items from suppliers in different
  geographic regions to avoid correlated disruption risks.
- **Risk-Adjusted Inventory**: Hold more safety stock for items with high supply
  risk, even if demand is stable.
- **Nearshoring**: Move supply sources closer to demand to reduce lead times,
  transportation risk, and geopolitical exposure.

## Anti-Patterns
- Assuming past stability predicts future stability. Low-probability, high-impact
  events define supply chain risk.
- Optimizing purely for cost without accounting for the hidden costs of
  concentration and fragility.
- Creating risk registers that are never reviewed or updated.
- Treating risk management as a one-time project rather than an ongoing practice.
- Ignoring cyber risk to supply chain systems and data.
- Conflating insurance with risk management. Insurance compensates for losses
  but does not prevent disruption or speed recovery.