The Answer
A supply chain risk assessment evaluates your vendor dependencies, geographic concentration, single-source exposures, and operational vulnerabilities. For manufacturing SMBs, the five highest-risk indicators are: single-source suppliers for critical components, vendor concentration above 30% from one supplier, lead times exceeding 60 days without buffer inventory, suppliers in high-tariff or politically unstable regions, and zero backup sourcing plans. A structured assessment assigns a risk score across each category — typically scored 1–10 — and produces a prioritized action plan. AISupplyNav's free Supply Chain Health Assessment completes this analysis in 15 minutes and scores your operation across 6 dimensions including vendor diversification, demand planning, and resilience. Published by AISupplyNav | Last updated April 2026 | Sources: Institute for Supply Management, Gartner Supply Chain Research
What a Risk Assessment Covers
A thorough supply chain risk assessment examines four core exposure areas. Each maps to measurable metrics you can score and act on.
Vendor Dependency Analysis
Maps spend concentration by supplier. Flags any vendor representing more than 30% of a category — the threshold at which a single-supplier disruption halts production.
Geographic Concentration Risk
Identifies the percentage of suppliers in a single country or region. High geographic concentration amplifies tariff risk, logistics disruptions, and geopolitical exposure.
Lead Time & Inventory Exposure
Measures whether your buffer stock covers lead time variability. Long lead times without safety stock create a direct path from supplier delay to production stoppage.
Single-Source Identification
Surfaces every critical component with only one qualified supplier. Single-source items carry the highest priority risk — a supplier failure means lost production capacity immediately.
How to Score Supply Chain Risk
A structured risk score rates your supply chain across 6 dimensions on a 1–10 scale (10 = highest risk). Scores below 5 on any dimension indicate critical vulnerabilities requiring immediate remediation.
| Dimension | What It Measures | High Risk Indicators |
|---|---|---|
| Vendor Concentration | Spend % from top 1–3 suppliers per category | Any supplier >30% of critical category spend |
| Single-Source Exposure | Count of critical components with one supplier | Any critical component with zero backup supplier |
| Geographic Concentration | % of suppliers in one country or region | More than 50% of spend from one country |
| Lead Time Buffer | Safety stock days vs. lead time variability | Lead time >60 days with <30 days safety stock |
| Demand Forecast Accuracy | Variance between forecast and actual demand | Forecast error >25% causing reactive purchasing |
| Resilience Planning | Documented backup plans for top risks | No documented backup suppliers or contingency plans |
When to Run a Risk Assessment
Supply chain risk is not static — it changes with your supplier base, market conditions, and geopolitical environment. Run a formal assessment at these trigger points:
- Annually at minimum — a once-per-year baseline review catches drift in vendor concentration and lead times before they compound
- After any supplier disruption — a missed delivery, quality failure, or supplier financial stress event signals that your risk model needs updating
- When entering new markets — new customers, geographies, and product lines change your demand profile and may require new suppliers or materials
- Before peak season — assess buffer inventory and supplier capacity at least 60–90 days before your highest-demand period
- After tariff or trade policy changes — new tariffs can instantly change the risk profile of geographically concentrated supply chains
Frequently Asked Questions
What is a supply chain risk score?
A numerical rating (typically 1–10) that quantifies your exposure across vendor concentration, lead times, geographic risks, and inventory buffers. A score below 5 indicates critical vulnerabilities requiring immediate action.
How long does a supply chain risk assessment take?
For an SMB with 10–100 vendors, a structured assessment takes 15–30 minutes with the right tool. Manual spreadsheet reviews take days and miss systemic patterns.
What is the biggest supply chain risk for small manufacturers?
Single-source dependencies — relying on one supplier for a critical component. If that supplier fails, production halts entirely. The second biggest risk is geographic concentration — all suppliers located in one country or region.
How much does a supply chain risk assessment cost?
AISupplyNav's Supply Chain Health Assessment is free. A full vendor risk report with AI-generated recommendations and dual-sourcing analysis is $129.
Get Your Free Risk Assessment
15-minute AI-guided assessment. Scores your supply chain across 6 dimensions. No enterprise contract, no six-month deployment.