Global Operations and Supply Chain Management

Introduction

Global operations and supply chain management concern the design, coordination, and control of activities through which organizations obtain inputs, transform them into products or services, and deliver value to customers across national borders. These activities include sourcing, procurement, production, transportation, warehousing, inventory management, information exchange, after-sales service, and reverse logistics.

Globalization has expanded access to suppliers, technologies, labor markets, and customers. It has also increased exposure to disruption, geopolitical conflict, cyberattacks, regulatory differences, environmental pressures, labor-rights violations, and demand uncertainty. A low-cost supply chain is not necessarily a competitive supply chain. Contemporary managers must balance cost, responsiveness, quality, resilience, compliance, sustainability, and strategic control.

A useful supply-chain perspective extends beyond the focal firm. It includes upstream suppliers, logistics providers, distributors, retailers, service partners, customers, regulators, communities, and natural ecosystems. Decisions made at one level can create consequences elsewhere. For example, reducing inventory may improve working capital but increase stockout risk; outsourcing may reduce unit cost but weaken visibility and intellectual-property protection; and selecting a distant low-cost supplier may increase emissions and exposure to transport disruption.

Learning Objectives

By the end of this chapter, readers should be able to:

1. Explain the strategic role and structure of global operations and supply chains.
2. Design sourcing, production, logistics, and service networks using cost, capability, risk, and sustainability criteria.
3. Apply location, outsourcing, quality, inventory, and service-management frameworks.
4. Evaluate resilience, traceability, cybersecurity, environmental, and human-rights risks.
5. Use quantitative measures to support global operations decisions.
6. Recommend governance mechanisms for managing international supply networks.

1. The Strategic Architecture of Global Operations

Operations transform resources into outputs. In manufacturing, inputs may include materials, components, labor, energy, and information. In services, inputs include employees, facilities, technology, data, and customer participation. Supply chain management coordinates these transformations across organizational boundaries.

The value chain describes activities through which a firm creates value, including inbound logistics, operations, outbound logistics, marketing and sales, and service. The supply chain emphasizes the connected flow of materials, information, funds, and risks among independent organizations. The two concepts overlap but are not identical: a value chain is often analyzed from the focal firm’s perspective, whereas a supply chain highlights interdependence among firms.

A global supply chain typically involves:

• Upstream activities: raw materials, components, contract manufacturers, and suppliers’ suppliers.
• Internal operations: production, assembly, quality assurance, maintenance, and inventory control.
• Downstream activities: transport, distribution, retail, installation, repair, and customer service.
• Enabling systems: finance, digital platforms, regulatory compliance, analytics, and risk governance.

The central strategic question is not simply “Where is production cheapest?” It is “What configuration provides the best long-term combination of customer value, total cost, capability, control, resilience, and responsible business performance?”

Strategic Fit and the Supply-Chain Operating Model

A supply chain should fit the competitive priorities of the business. A firm selling standardized products with stable demand may emphasize efficiency, high asset utilization, and consolidated production. A firm selling innovative products with uncertain demand may emphasize flexibility, postponement, rapid replenishment, and close supplier collaboration.

Common operating models include:

These models are not mutually exclusive. A firm may use lean production for mature products, agile postponement for seasonal products, and redundant sourcing for critical components.

2. Global Network Design and Location Decisions

Network design determines the number, location, capacity, ownership, and roles of facilities and partners. Decisions may include where to locate factories, distribution centers, service hubs, supplier clusters, data centers, and repair facilities.

Location Criteria

Important criteria include:

1. Total landed cost: purchase price, transport, duties, insurance, handling, inventory, quality costs, and compliance costs.
2. Market access: proximity to customers, regional trade agreements, and delivery-time requirements.
3. Capability: technical skills, supplier ecosystems, infrastructure, and process maturity.
4. Risk: political stability, natural hazards, labor disruption, currency exposure, and regulatory uncertainty.
5. Sustainability: energy sources, emissions, water availability, waste regulation, and human-rights conditions.
6. Strategic control: protection of intellectual property, data, technology, and process know-how.
7. Scalability: availability of land, labor, utilities, logistics capacity, and future expansion options.

A location that appears inexpensive on a wage basis may be costly after transportation, defects, delays, tariffs, buffer inventory, and management complexity are included.

Total-Cost Analysis

A simplified annual total-cost model for a facility or sourcing option is:

where:

• TC = annual total cost;
• F = annual fixed facility and administrative cost;
• Qc = annual purchasing or conversion cost;
• Tr = transportation and logistics cost;
• I = inventory carrying cost;
• Ql = quality-related cost, including inspection, defects, and returns;
• C = compliance, tax, duty, and regulatory cost;
• R = monetized expected risk cost, where estimation is defensible.

All terms must use the same currency and time period. The model is useful for comparison, but it is not a complete decision rule. Strategic capabilities, option value, social impacts, and hard-to-monetize risks may require separate evaluation.

Weighted-Factor Location Method

When both quantitative and qualitative factors matter, managers may use a weighted-factor model:

Here S_j is the score of location j, w_i is the weight of criterion i, and r_ij is the rating of location j on criterion i. Weights should sum to 1, and ratings must use a consistent scale. The method supports structured judgment but does not eliminate bias. Sensitivity analysis should test whether the ranking changes when weights or ratings vary.

3. Global Sourcing and Outsourcing

Sourcing is the process of identifying and obtaining goods, services, technology, or capabilities from internal or external providers. Outsourcing transfers an activity to an external organization. Offshoring locates an activity in another country; it may be internal or outsourced. Global purchasing concerns transactions, while strategic sourcing includes supplier-market analysis, relationship design, risk management, and long-term capability development.

Make-or-Buy Decisions

A make-or-buy decision should consider more than quoted price. Relevant questions include:

• Is the activity strategically important or a source of differentiation?
• Does the firm possess the required technology and managerial capability?
• Can external suppliers achieve better scale or specialized knowledge?
• How difficult would it be to switch suppliers?
• Could outsourcing expose intellectual property, personal data, or critical infrastructure?
• What are the consequences of supplier failure?
• Are labor, environmental, and human-rights controls credible?

Transaction-cost economics emphasizes uncertainty, frequency, and asset specificity. When investments are highly specialized, contracts are incomplete, and opportunism is costly, vertical integration or a closely governed partnership may be preferable. Resource-based reasoning emphasizes whether an activity provides valuable, rare, difficult-to-imitate, and organizationally embedded capabilities. Dynamic-capabilities theory adds the question of whether the firm can reconfigure its network as technology and markets change.

Sourcing Strategies

• Single sourcing: one principal supplier; efficient relationship management but high interruption risk.
• Multiple sourcing: two or more suppliers; improves resilience but may reduce volume discounts.
• Dual sourcing: two qualified suppliers, often with an intentionally unequal allocation.
• Local or regional sourcing: reduces lead time and transport exposure but may increase unit cost.
• Global sourcing: accesses scale, capability, and cost advantages but increases complexity.
• Supplier development: the buyer invests in quality, process, technology, or training to improve performance.
• Modular sourcing: suppliers provide standardized modules, allowing design flexibility and postponement.

Supplier selection should combine capability audits, financial analysis, process-quality evidence, cybersecurity assessment, environmental and labor due diligence, continuity planning, and reference checks. Contracts should specify service levels, quality standards, change control, audit rights, data protection, incident notification, remediation, and exit provisions.

4. Production and Service Network Design

Production networks may be centralized, regionalized, or distributed. Centralization can provide scale economies, process consistency, and concentrated expertise. Regionalization can reduce lead times, trade exposure, and transport emissions. Distribution can improve proximity and resilience but may duplicate assets and complicate quality control.

Postponement and Modularization

Postponement delays final configuration, packaging, labeling, or customization until demand is clearer. It is valuable when products share common components but differ in late-stage features. Modular design enables common platforms, interchangeable components, and flexible final assembly.

Capacity and Flexibility

Capacity planning must consider average demand, peak demand, variability, maintenance, and disruption. A facility operating permanently at its theoretical maximum has little ability to absorb demand surges or supplier failures. Flexibility can arise from cross-trained workers, common equipment, interchangeable tooling, qualified alternate suppliers, and transferable production knowledge.

In services, capacity is often perishable. An unused airline seat or hotel room cannot be stored for later sale. Managers therefore use appointment systems, cross-training, demand-based staffing, self-service technologies, and carefully designed reservation policies.

5. Logistics, Inventory, and Customer Service

International logistics coordinates transportation, customs, documentation, warehousing, packaging, cargo security, and delivery. Mode selection involves trade-offs among cost, speed, capacity, reliability, emissions, and product requirements.

Inventory Functions

Inventory can:

• decouple production from demand;
• buffer transportation and supply uncertainty;
• support economies of scale;
• enable customer responsiveness;
• protect against seasonal or geopolitical disruption.

However, inventory also creates capital requirements, obsolescence, damage, storage, insurance, and environmental costs.

Economic Order Quantity

For a stable-demand item with replenishment in fixed batches, the basic economic order quantity is:

where Q* is the optimal order quantity in units per order, D is annual demand in units per year, S is ordering cost per order, and H is annual holding cost per unit per year. The model assumes relatively constant demand, constant ordering and holding costs, instantaneous replenishment, no quantity discounts, and no stockouts. It is a benchmark rather than a complete global inventory policy.

For example, if annual demand is 24,000 units, ordering cost is $50 per order, and annual holding cost is $2 per unit, then:

The result should be interpreted alongside container quantities, supplier minimums, shelf life, cash constraints, and actual replenishment lead times.

Reorder Point and Safety Stock

A basic reorder point is:

where d is average demand per time period, L is replenishment lead time in the same time unit, and SS is safety stock in units. If demand and lead-time uncertainty are statistically modeled, a common approximation is:

where z is the selected service-factor value and σ_LT is the standard deviation of demand during lead time. This formula requires a defined service interpretation and an appropriate probability model. If demand and lead time are both variable, σ_LT must be estimated using a model that reflects their variability and possible correlation; it should not be inserted casually from unrelated standard deviations.

Service metrics should be distinguished. Cycle service level is the probability of avoiding a stockout during a replenishment cycle. Fill rate is the proportion of demand supplied immediately from available inventory. A high cycle service level does not automatically imply a particular fill rate.

6. Quality Management Across Borders

Global quality management must address design quality, process capability, supplier quality, regulatory conformity, and customer experience. Quality is not merely inspection at the border; it is built into product specifications, process design, training, measurement, and corrective action.

Important principles include:

• prevention rather than reliance on final inspection;
• standardized specifications with controlled local adaptation;
• statistical process monitoring where data quality supports it;
• root-cause analysis rather than superficial correction;
• supplier involvement in design and improvement;
• traceable records and controlled documentation;
• independent escalation of safety and compliance concerns.

The cost of quality includes prevention costs, appraisal costs, internal failure costs, and external failure costs. A low purchase price can be misleading if it generates recalls, warranty claims, reputational damage, regulatory penalties, or customer loss.

7. Resilience, Risk, and Continuity

Supply-chain risk is the possibility that an event or condition will prevent the network from achieving its objectives. Risks may be operational, financial, geopolitical, environmental, technological, legal, or social.

A practical risk process includes:

1. Map critical products, suppliers, facilities, routes, systems, and dependencies.
2. Identify hazards and vulnerabilities, including tier-two and tier-three dependencies.
3. Assess likelihood, impact, detectability, and recovery time.
4. Select treatments such as redundancy, buffers, substitution, insurance, contracts, or redesign.
5. Establish indicators, escalation thresholds, and response ownership.
6. Test continuity plans through simulations and exercises.
7. Learn from incidents and update the network.

Resilience is the capacity to prepare for, absorb, recover from, and adapt to disruption. Redundancy is only one resilience mechanism. Others include flexibility, visibility, collaboration, modularity, substitution, regional capacity, and rapid decision rights. Excessive redundancy can create cost and complexity, so the appropriate design depends on the criticality and recoverability of each flow.

Useful risk metrics include supplier concentration, time-to-survive, time-to-recover, forecast error, lead-time variability, on-time-in-full delivery, and the proportion of critical suppliers with tested continuity plans. These metrics should be used diagnostically rather than as isolated performance targets.

8. Traceability, Digitalization, and Cybersecurity

Traceability is the ability to follow the history, application, location, and status of a product, component, material, or transaction. It supports recalls, ethical sourcing, regulatory compliance, counterfeit prevention, quality investigation, and sustainability claims.

Effective traceability requires:

• unique identifiers for products, batches, and locations;
• event records at relevant custody and transformation points;
• synchronized master data;
• defined data ownership and retention rules;
• verification rather than blind reliance on supplier declarations;
• procedures for correcting incomplete or conflicting records.

Technologies may include enterprise resource planning systems, supplier platforms, Internet of Things sensors, radio-frequency identification, digital product passports, geospatial monitoring, and distributed ledgers. Technology does not guarantee truth: inaccurate inputs, weak governance, or manipulated records remain possible.

Cybersecurity is a supply-chain concern because external providers may access production systems, corporate networks, product software, customer data, or operational technology. Controls should include least-privilege access, multifactor authentication, network segmentation, secure software development, patch management, encryption, logging, supplier security requirements, incident reporting, backup recovery, and tested response plans. Cybersecurity clauses should specify responsibilities across the supplier lifecycle, including onboarding, change management, termination, and deletion or return of data.

Artificial intelligence can improve demand sensing, anomaly detection, route planning, predictive maintenance, and supplier-risk monitoring. Nevertheless, managers must govern data quality, explainability, bias, model drift, privacy, cybersecurity, and human accountability. An algorithmic recommendation should not automatically override professional judgment in safety-critical or rights-sensitive decisions.

9. Environmental and Human-Rights Governance

Global supply chains distribute environmental and social impacts across jurisdictions. Key environmental issues include greenhouse-gas emissions, energy and water use, waste, biodiversity, packaging, pollution, and product end-of-life. Social risks include forced labor, child labor, unsafe workplaces, discrimination, excessive working hours, wage violations, freedom-of-association restrictions, land rights, and community harm.

Responsible governance requires risk-based due diligence rather than symbolic supplier questionnaires. Core practices include:

• identifying actual and potential adverse impacts;
• prioritizing severe and likely impacts;
• engaging affected stakeholders where appropriate;
• using credible audits and worker-centered feedback mechanisms;
• correcting harms and tracking remediation;
• reporting limitations transparently;
• avoiding retaliation against complainants;
• reassessing risks when products, suppliers, locations, or laws change.

Audits can be useful but are incomplete. Announced audits may miss concealed practices, workers may fear retaliation, and passing an audit may not demonstrate continuing performance. Effective programs combine audits with worker interviews, grievance channels, purchasing-practice reform, supplier capability building, and independent verification.

Managers should distinguish operational efficiency from responsible performance. For example, forcing suppliers to accept volatile orders and short payment terms may transfer risk to vulnerable workers and increase quality or labor violations. Ethical sourcing therefore includes the buyer’s own conduct, not only supplier behavior.

10. Governance and Performance Measurement

Governance defines who makes decisions, who owns risk, how information is shared, and how disputes are resolved. Mechanisms range from market transactions to long-term relational partnerships and vertical integration. Effective governance aligns incentives, allocates risk fairly, protects information, and provides escalation routes.

A balanced performance system may include:

Metrics can create dysfunctional behavior when targets are pursued in isolation. For example, a transport-cost target may encourage slower modes that violate customer commitments, while a utilization target may discourage capacity held for resilience. Balanced scorecards, cross-functional review, and periodic target reassessment reduce these problems.

Applied Case: Regionalizing a Medical-Device Supply Network

The following is an illustrative case.

Background

MedGlobal Devices, a fictional manufacturer of diagnostic equipment, sells in North America, Europe, and Asia. Its precision sensor is produced by a single supplier located far from the company’s final-assembly plants. The supplier offers a low unit price, but lead times are long and variable. The sensor is difficult to substitute because it requires specialized tooling and regulatory validation.

Problem

A port disruption and a cyber incident at a logistics provider caused a six-week interruption. MedGlobal had insufficient inventory to maintain customer service. The company also discovered that its supplier’s sub-tier source for a critical mineral had weak labor-risk documentation. Finance proposed increasing safety stock, while operations proposed a second supplier in a regional market at a higher purchase price.

Analysis

The low quoted price understated total exposure. The sensor had high asset specificity, limited substitution, long replenishment time, and significant customer consequences if unavailable. Increasing inventory alone would tie up capital and could still fail during a prolonged disruption. The sub-tier issue also created regulatory and reputational risk. A structured assessment therefore considered total landed cost, expected disruption loss, qualification time, cybersecurity, traceability, and human-rights due diligence.

Approach and Solution

MedGlobal adopted a segmented strategy:

1. Qualified a regional second source for 35 percent of normal demand.
2. Retained the original supplier for 65 percent, preserving scale benefits.
3. Funded joint process validation and tooling standardization to improve substitutability.
4. Established strategic safety stock for the sensor based on recovery time rather than a blanket inventory increase.
5. Required tier-two mineral traceability and remediation evidence.
6. Added supplier cybersecurity controls, incident notification, and recovery testing.
7. Created a monthly cross-functional review covering service, quality, cost, rights, and resilience.

Outcome

The regional supplier increased unit purchase cost, but the network reduced expected interruption exposure and shortened recovery time. Standardized tooling improved transferability, while improved traceability enabled more credible compliance reporting. The company did not eliminate risk; instead, it created a more governable and recoverable network.

Learning Points

The case demonstrates that sourcing decisions must evaluate total system performance rather than purchase price. Resilience is designed through a portfolio of actions: multiple qualified sources, modularity, visibility, inventory, contractual controls, and tested recovery. It also shows that environmental, human-rights, and cybersecurity risks are operational risks, not separate public-relations topics.

Challenges and Limitations

Global operations models face several limitations. Cost comparisons can be distorted by exchange rates, subsidies, transfer prices, or incomplete externality accounting. Supplier audits may provide false assurance. Forecasting models perform poorly during structural breaks. Digital systems can increase visibility while also expanding cyber exposure. Regionalization may improve resilience but reduce economies of scale. Local sourcing can shorten transport distances without guaranteeing lower emissions if local production is energy intensive. Finally, ethical commitments may conflict with short-term commercial pressures, requiring governance that protects responsible decisions from being reversed by isolated cost targets.

Managers should therefore use scenario analysis, sensitivity testing, pilot projects, independent assurance, stakeholder engagement, and explicit decision rights. The objective is not to find a permanently optimal network. It is to create a network that can learn, adapt, and remain accountable under changing conditions.

Contemporary Developments and Best Practices

Current developments include regional supply ecosystems, nearshoring, digital product passports, circular supply chains, low-carbon logistics, supplier-finance programs, advanced robotics, and AI-supported planning. These developments should be evaluated against business purpose and governance capacity rather than adopted as fashionable technologies.

Best practices include:

• segment products and suppliers by value, criticality, uncertainty, and risk;
• calculate total landed cost and expected disruption consequences;
• maintain accurate multi-tier supply maps for critical items;
• combine efficiency with targeted redundancy and flexibility;
• use postponement and modularity to reduce forecast dependence;
• integrate quality, cybersecurity, environmental, and human-rights requirements into sourcing;
• establish measurable service and recovery objectives;
• test continuity and cyber-response plans;
• align incentives across purchasing, operations, finance, and sustainability;
• provide effective grievance and remediation mechanisms;
• review network assumptions as technology, regulation, climate, and geopolitics change.

Chapter Summary

Global operations and supply chain management require the integrated design of sourcing, production, logistics, service, information, and governance systems. Network choices should be evaluated through total cost, capability, customer service, resilience, sustainability, human rights, and strategic control. Location and outsourcing decisions must consider hidden costs, asset specificity, switching difficulty, and risk exposure.

Inventory and logistics support service but create capital and environmental burdens. Quantitative tools such as total-cost analysis, weighted-factor scoring, economic order quantity, reorder points, and safety-stock models provide useful benchmarks when their assumptions are respected. Quality must be designed into processes and relationships rather than inspected only at the end.

Resilient networks combine visibility, flexibility, qualified alternatives, appropriate buffers, modularity, collaboration, and tested recovery. Traceability and cybersecurity are essential elements of operational governance. Environmental and human-rights due diligence must address multi-tier impacts and include remediation, worker voice, and responsible buyer behavior. Ultimately, effective global operations are not defined by minimum cost alone; they are defined by the ability to deliver value reliably, responsibly, and adaptively across changing international conditions.

Key Terms

Global operations: Management of transformation and delivery activities across national borders.

Supply chain management: Coordination of material, information, financial, and risk flows across connected organizations.

Value chain: Activities through which an organization creates and delivers value.

Total landed cost: Full cost of obtaining and delivering an item, including purchase, logistics, duties, inventory, quality, and compliance costs.

Strategic sourcing: Long-term management of supplier markets, capabilities, relationships, and risks.

Outsourcing: Transfer of an activity to an external provider.

Offshoring: Locating an activity in another country.

Postponement: Delaying final product configuration until demand information improves.

Modularization: Designing products or processes around standardized interchangeable modules.

Safety stock: Inventory held to buffer uncertainty in demand or replenishment.

Reorder point: Inventory position at which replenishment should be initiated.

Cycle service level: Probability of avoiding a stockout during a replenishment cycle.

Fill rate: Proportion of demand supplied immediately from available inventory.

Supply-chain resilience: Capacity to prepare for, absorb, recover from, and adapt to disruption.

Traceability: Ability to follow the history, location, application, and status of an item or transaction.

Human-rights due diligence: Process for identifying, preventing, mitigating, and remediating adverse human-rights impacts.

Supplier concentration: Degree to which supply depends on a small number of providers or locations.

Time-to-recover: Time required to restore an acceptable level of supply-chain performance after disruption.

Review Questions

Short Answer Questions

1. Distinguish between a value chain and a supply chain.
2. What factors should be included in total landed cost?
3. Explain the difference between outsourcing and offshoring.
4. What is the purpose of safety stock?
5. Why is traceability important in global operations?

Long Answer Questions

1. Explain how a firm should balance efficiency, responsiveness, resilience, and sustainability when designing a global supply network.
2. Analyze the strategic and transaction-cost considerations in a make-or-buy decision.
3. Discuss the assumptions and limitations of the economic order quantity model in international supply chains.
4. Explain how cybersecurity and human-rights due diligence should be integrated into supplier governance.
5. Evaluate the advantages and disadvantages of centralized, regionalized, and distributed production networks.

Analytical / Application Questions

1. A company is considering a distant supplier with a lower unit price and a regional supplier with a higher unit price. Design a decision framework that incorporates logistics, inventory, quality, disruption, environmental, and human-rights factors.
2. A critical supplier has excellent quality and low cost but is located in an area exposed to earthquakes and has no tested recovery plan. Recommend a resilience portfolio and explain the trade-offs.
3. Using the illustrative MedGlobal case, propose performance indicators and governance routines that would reveal whether the redesigned network is genuinely more resilient and responsible.

Multiple Choice Questions with Answers

Question 1

Which factor most directly distinguishes total landed cost from supplier purchase price?

A. Only the supplier’s advertising expenditure

B. Transportation, duties, inventory, quality, and compliance costs

C. The number of employees in the buying firm

D. The supplier’s preferred currency alone

Correct Answer: B. Transportation, duties, inventory, quality, and compliance costs

Question 2

A firm delays final labeling and configuration until regional demand is known. Which concept is being applied?

A. Vertical integration

B. Postponement

C. Single sourcing

D. Forward integration

Correct Answer: B. Postponement

Question 3

In the basic economic order quantity model, what does S represent?

A. Annual demand

B. Annual holding cost per unit

C. Ordering cost per order

D. Safety stock

Correct Answer: C. Ordering cost per order

Question 4

Which statement about safety stock is most accurate?

A. It eliminates all supply-chain risk

B. It buffers uncertainty in demand or replenishment

C. It is identical to cycle service level

D. It should always equal annual demand

Correct Answer: B. It buffers uncertainty in demand or replenishment

Question 5

Which condition generally strengthens the case for vertical integration?

A. Low asset specificity and many interchangeable suppliers

B. High asset specificity and costly supplier failure

C. Perfectly stable prices and no uncertainty

D. A complete contract covering every future event

Correct Answer: B. High asset specificity and costly supplier failure

Question 6

Which practice most directly improves multi-tier supply-chain traceability?

A. Removing batch identifiers

B. Using unique identifiers and recording custody events

C. Relying exclusively on verbal supplier assurances

D. Reducing data retention to zero

Correct Answer: B. Using unique identifiers and recording custody events

Question 7

Which is an example of a resilience mechanism other than redundancy?

A. Modularity that permits production transfer

B. Eliminating all supplier information

C. Increasing dependence on one route

D. Reducing recovery planning

Correct Answer: A. Modularity that permits production transfer

Question 8

Why can supplier audits provide incomplete assurance about human-rights performance?

A. Audits always measure financial performance only

B. Workers may conceal conditions or fear retaliation

C. Audits cannot examine any documented process

D. Human-rights risks occur only inside buying firms

Correct Answer: B. Workers may conceal conditions or fear retaliation

Question 9

Which cybersecurity control limits a user’s access to only the systems needed for that user’s role?

A. Least privilege

B. Postponement

C. Economic order quantity

D. Supplier pooling

Correct Answer: A. Least privilege

Question 10

A company keeps a second qualified supplier for a critical component while retaining most volume with the primary supplier. What sourcing strategy is this?

A. Pure single sourcing

B. Dual sourcing

C. Complete vertical integration

D. Uncontrolled spot purchasing

Correct Answer: B. Dual sourcing