Global Supply Chain Risk, Resilience and Continuity

Introduction

Global supply chains create access to specialised capabilities, lower-cost production, broader markets and economies of scale. They also connect organisations to disruptions that may originate far beyond their direct control. A port closure, cyberattack on a logistics provider, export restriction, supplier insolvency, flood, pandemic, labour dispute or inaccurate demand signal can interrupt material, information and financial flows simultaneously.

Supply-chain risk management is therefore not limited to insurance or emergency purchasing. It is a strategic discipline concerned with understanding uncertainty, reducing unacceptable exposure, preparing for disruption, responding effectively and learning after recovery. Resilience is the capability of a supply chain to absorb disturbance, adapt and restore or improve performance. Business continuity focuses on maintaining critical operations during interruption, while crisis management coordinates decisions when consequences are severe, rapid and uncertain.

The central managerial challenge is balance. Maximum efficiency may reduce buffers and increase dependence on single sources; maximum redundancy may increase cost and complexity. Effective design aligns risk controls with customer requirements, risk appetite, regulatory duties and the economic importance of each flow.

Learning Objectives

By the end of this chapter, the learner should be able to:

1. Distinguish supply-chain risk, vulnerability, disruption, resilience and continuity.
2. Identify operational, supplier, cyber, climate, geopolitical and logistics risks.
3. Assess risks using risk registers, heat maps, FMEA, scenario analysis and stress testing.
4. Select suitable mitigation methods, including redundancy, flexibility, visibility and collaboration.
5. Design business-continuity and crisis-response arrangements.
6. Evaluate trade-offs using expected loss, recovery time, service and total-cost perspectives.
7. Address governance, ethics, regulation, technology and continuous improvement.

1. Foundations of Global Supply-Chain Risk

1.1 Key concepts

Risk is the effect of uncertainty on objectives. In supply-chain practice, it usually includes both the likelihood of an event and the consequences if it occurs. Hazard is a condition with the potential to cause harm; exposure is the extent to which an organisation is subject to that hazard; and vulnerability is the susceptibility of the system to damage or interruption.

A disruption is an event that interrupts normal supply-chain flows or performance. A crisis is a disruption whose scale, speed, ambiguity or stakeholder consequences exceed routine managerial procedures. Business continuity is the capability to continue delivery of acceptable products or services during and after disruption. Recovery is the restoration of capacity and performance. Resilience is broader: it includes resistance before the event, response during it, recovery afterwards and adaptation based on learning.

Risk may be:

• Operational: equipment failure, quality defects, process errors, capacity shortages or inaccurate inventory records.
• Supplier: financial failure, poor quality, dependency on a single supplier, labour problems, unethical conduct or sub-tier opacity.
• Logistics: port congestion, carrier failure, customs delays, accidents, theft, temperature excursions or infrastructure breakdown.
• Cyber and information: ransomware, data manipulation, identity compromise, system outage, malicious software or third-party platform failure.
• Climate and environmental: flood, drought, wildfire, storm, heat, water scarcity, sea-level rise or regulatory transition.
• Geopolitical: war, sanctions, tariffs, export controls, political instability, border closure or regulatory divergence.
• Demand and financial: demand shocks, commodity-price volatility, currency movements, inflation, credit restrictions or customer insolvency.

Risks can also be classified as known-knowns, which can be planned for; known-unknowns, whose occurrence is recognised but whose timing or magnitude is uncertain; and unknown-unknowns, which challenge existing assumptions. This classification cautions managers against relying exclusively on historical frequencies.

1.2 Risk propagation and interdependence

A supply chain is a network rather than a simple linear sequence. Disruption at one node can propagate through shared suppliers, shared transport lanes, common software, constrained ports or correlated geographic exposure. A firm may believe it has two suppliers, yet both may obtain a critical component from the same sub-tier producer. This is a hidden single point of failure.

Interdependence creates nonlinear effects. A small delay can become a major shortage when production schedules are tightly synchronised, inventory is low and replenishment lead times are long. Information distortion, often called the bullwhip effect, can amplify a modest demand change into large upstream order fluctuations.

Risk governance should therefore examine nodes, links and dependencies, not merely first-tier supplier names. Relevant questions include: Which facilities share a region? Which suppliers share raw materials? Which systems support multiple sites? Which customers depend on the same constrained capacity? Which transport corridors lack substitutes?

2. Risk Identification and Assessment

2.1 The risk-management process

A practical cycle consists of establishing context, identifying risks, analysing likelihood and impact, evaluating against risk appetite, treating exposures, monitoring indicators and communicating decisions. The cycle should be repeated after major network, product, technology, regulatory or geopolitical changes.

A risk register normally records the risk statement, cause, event, consequence, owner, affected processes, existing controls, likelihood, impact, treatment, early-warning indicators, response actions and review date. A well-written statement separates cause, event and consequence. For example: “Because the principal resin supplier is located in a flood-prone industrial zone, flooding may interrupt resin availability, causing production stoppage and customer backorders.”

2.2 Risk mapping and heat maps

A heat map positions risks according to likelihood and consequence. Consequence may be measured in lost contribution, customer service, safety, legal exposure, reputation or environmental harm. Scales should be defined explicitly; otherwise a rating of “high” means different things to different assessors.

A basic priority score can be expressed as:

where R is a priority score, P is the estimated probability of the event over a stated period, and I is its consequence score or monetary impact. The equation is useful for ranking when scales are comparable. It is not a complete measure of risk: it can conceal rare catastrophic events, correlation and uncertainty in the estimates. Monetary expected loss is more interpretable when credible probability and consequence data exist:

where pᵢ is the probability of scenario i, Cᵢ is its loss, and the probabilities across mutually exclusive scenarios sum to 1. Expected loss supports economic comparison but should not be used to justify tolerating an unacceptable safety or human-rights risk merely because its average cost is low.

2.3 Failure Mode and Effects Analysis

FMEA examines how a process or product can fail. For each failure mode, the team assesses:

• Severity (S): consequence if the failure occurs.
• Occurrence (O): frequency or likelihood of the cause.
• Detection (D): likelihood that existing controls will fail to detect the problem before harm occurs.

The traditional risk priority number is:

Scores are usually ordinal, such as 1 to 10. A high score identifies a candidate for action, but RPN is not a probability and should not be compared as if it were monetary risk. Multiplication can also allow a catastrophic but infrequent failure to receive the same score as a minor frequent failure. Teams should therefore review high-severity modes separately and document the scoring definitions.

2.4 Scenario analysis and stress testing

Scenario analysis explores coherent combinations of events, such as “a regional conflict causes export controls, fuel-price increases and port diversion.” Stress testing asks whether the network remains within acceptable performance limits under severe but plausible conditions. Scenarios should vary demand, supply, lead time, capacity, transport availability, exchange rates and recovery duration.

Useful outputs include service level, fill rate, revenue at risk, cash requirement, production loss, recovery time and critical customer impact. Sensitivity analysis identifies assumptions that most influence the result. Monte Carlo simulation may be used where probability distributions and dependencies are sufficiently credible; false precision should be avoided when evidence is weak.

3. Designing Resilient Supply Chains

Resilience is designed through a portfolio of capabilities rather than one universal solution.

3.1 Redundancy and buffers

Redundancy includes multiple suppliers, alternative plants, spare equipment, substitute materials, duplicate data centres and diversified transport providers. Inventory and capacity buffers absorb variation. A simple reorder-point relationship is:

where ROP is the reorder point in units, μ_L is expected demand during lead time, and SS is safety stock. If demand per period has standard deviation σ_d, lead time is constant at L periods, and independent demand is assumed, a common safety-stock approximation is:

where z is the chosen service-factor quantile. This formula assumes stable demand variation, independent periods and constant lead time. If lead time is variable, demand and lead time are correlated, or demand is intermittent, a more suitable probabilistic model is required. Redundancy improves continuity but creates qualification, governance, inventory and coordination costs.

3.2 Flexibility and postponement

Flexibility is the ability to change volume, mix, supplier, route, product design or production location. Examples include common components, modular design, cross-trained labour, transferable tooling, flexible contracts and postponement of final configuration. Flexibility often provides more value than permanent excess capacity because it preserves options under changing conditions.

3.3 Visibility and collaboration

Visibility means timely, accurate knowledge of inventory, orders, capacity, shipment status, conditions and constraints across relevant tiers. It is not simply collecting more data. Data must have clear ownership, usable definitions, appropriate access and decision links. Collaborative planning, shared forecasts, supplier development and joint emergency procedures can reduce response time and prevent destructive competition for scarce capacity.

3.4 Network and geographic design

Network design should consider total landed cost, lead time, carbon, geopolitical exposure, infrastructure, labour availability, supplier capability and recovery alternatives. “China plus one,” regionalisation and nearshoring may reduce certain exposures but can increase cost, reduce scale or create new concentration risks. Geographic diversification is effective only when locations are not exposed to the same hazard and can operate independently.

3.5 Resilience metrics

Useful indicators include:

• time to survive (how long operations can continue without replenishment);
• time to recover (TTR), the time required to restore an agreed level of capability;
• time to detect (TTD), the time between occurrence and reliable recognition;
• service level and order fill rate;
• percentage of spend or critical parts with qualified alternatives;
• supplier financial, quality and delivery performance;
• concentration by supplier, country, port and sub-tier;
• percentage of critical processes tested through continuity exercises.

Metrics should be interpreted together. A high inventory level may improve short-term survival but conceal poor supplier quality or excessive working capital. A short TTR is valuable only if the organisation can detect the disruption quickly and has a viable response plan.

4. Business Continuity and Crisis Response

4.1 Business-impact analysis

Business-impact analysis identifies critical products, processes, resources and dependencies. For each activity, the organisation estimates the maximum tolerable period of interruption, minimum acceptable service, financial and regulatory consequences, required people and technology, and upstream and downstream dependencies.

Important terms are:

• RTO (Recovery Time Objective): target time to restore a process or service.
• RPO (Recovery Point Objective): maximum acceptable period of data loss, relevant to information systems.
• MTPD (Maximum Tolerable Period of Disruption): longest period before consequences become unacceptable.

A credible plan sets RTO ≤ MTPD and aligns recovery resources with business priorities. RTO and RPO are not interchangeable: RTO concerns time to restore; RPO concerns how much transactional data may be lost.

4.2 Continuity planning

A continuity plan should identify activation criteria, decision rights, emergency contacts, alternate suppliers and sites, minimum staffing, inventory allocation rules, communications, manual workarounds, cyber recovery procedures, transport alternatives and criteria for returning to normal operations. Plans must be tested through simulations, tabletop exercises and operational drills. Untested plans frequently fail because contact details, system access, supplier assumptions or approval authorities are outdated.

4.3 Crisis-response structure

During a crisis, organisations need a clear incident commander or response leader, functional leads for operations, procurement, logistics, IT, finance, legal, safety and communications, and a defined escalation path. The response cycle is:

1. Detect and verify the event.
2. Protect people, environment and critical assets.
3. Establish a common operating picture.
4. Stabilise essential flows and allocate scarce resources.
5. Communicate accurately with employees, suppliers, customers, regulators and communities.
6. Recover, document decisions and conduct a review.

Crisis communication should be timely, factual and consistent. Concealing material information can increase harm, regulatory exposure and reputational damage.

5. Cyber, Climate and Geopolitical Risk

5.1 Cyber risk

Supply chains depend on enterprise-resource-planning systems, warehouse systems, electronic data interchange, transport platforms, cloud providers and supplier portals. Controls should include least-privilege access, multifactor authentication, network segmentation, secure backups, patching, supplier security requirements, incident playbooks, recovery testing and monitoring of privileged accounts. Resilience requires the ability to operate safely in degraded or offline mode.

Artificial intelligence can support anomaly detection, demand sensing, route analysis and scenario generation. However, AI systems introduce model risk, data poisoning, privacy concerns, explainability problems and dependence on external providers. Human approval remains necessary for high-impact decisions, especially allocation, safety, employment and regulatory reporting.

5.2 Climate risk

Climate risk has both physical and transition dimensions. Physical risks affect facilities, transport and suppliers through acute events or chronic changes. Transition risks arise from carbon regulation, energy-system change, technology substitution and changing customer expectations. Assessment should use site-level hazard data, not only national averages, and should consider future time horizons. Adaptation may involve elevation, flood barriers, water efficiency, heat controls, alternate routes, resilient packaging and supplier relocation.

5.3 Geopolitical and regulatory risk

Organisations should monitor sanctions, export controls, tariffs, customs rules, forced-labour requirements, local-content rules, conflict exposure and political instability. Compliance cannot be delegated entirely to a broker or supplier. Product classification, end-user screening, origin records and documentary controls require accountable ownership. Ethical sourcing also requires due diligence beyond contractual statements, including worker safety, wages, freedom from forced labour and grievance mechanisms.

6. Governance and Decision-Making

Risk ownership belongs to business leaders, while specialist risk, procurement, security, legal and continuity teams provide methods and challenge. The board or executive committee should define risk appetite, approve material resilience investments and review major exposures. Internal audit can test control design and operating effectiveness.

A mature governance system includes a common taxonomy, documented thresholds, independent challenge, escalation rules, supplier accountability, scenario exercises, lessons-learned reviews and traceable decisions. Contractual provisions may address notification, audit rights, cyber controls, continuity obligations, capacity reservation, force majeure, sanctions compliance and data protection. Contracts do not remove operational risk; they allocate responsibilities and improve recoverability.

Trade-offs should be evaluated using total cost rather than purchase price alone. A useful comparison is the incremental resilience cost against avoided disruption loss, while also considering service, safety, legal, carbon and ethical outcomes. Expected monetary value is informative, but a decision may be justified by risk appetite, strategic capability or protection of human life even where financial return is uncertain.

7. Illustrative Case: Medical-Device Component Disruption

Background

A fictional medical-device manufacturer, MedEquip, sources a precision valve from one qualified supplier in a coastal industrial region. The valve is used in a life-support product. Inventory policy was designed for normal demand and the supplier’s average lead time. The supplier’s sub-tier machining partner is not visible to MedEquip.

Problem

A severe storm floods the industrial region. The supplier’s building remains intact, but its sub-tier machining partner loses power and cannot deliver. At the same time, a cyberattack disables the supplier’s order-management system. MedEquip initially receives no reliable shipment information. The component has a long qualification cycle, and substitution is constrained by patient-safety requirements.

Analysis

The risk register identifies a hidden single point of failure, geographic concentration, cyber dependency and inadequate information continuity. FMEA assigns very high severity because a shortage could delay critical medical equipment. A heat map based only on historical flood frequency understates the risk; scenario analysis reveals that flood, power loss and cyber outage can occur together. Business-impact analysis classifies the valve as critical, with a short MTPD and a stringent quality-release process.

Approach and solution

The crisis team first verifies patient-safety and regulatory obligations, then allocates available valves to the most critical orders. It contacts the supplier through alternate channels, requests a manual production and inventory confirmation, and engages logistics providers with priority capacity. MedEquip informs affected customers without overstating certainty.

For recovery, the company qualifies a second supplier in a different hazard zone, requires sub-tier mapping for critical components, establishes minimum strategic stock based on validated lead-time and demand assumptions, and creates an alternate communication procedure. It funds supplier backup power, offline order records and cyber-recovery testing. Engineering begins a redesign using a common valve interface, subject to regulatory approval.

Outcome and learning points

Production is constrained but not stopped. The company later reduces TTR through dual qualification and modular design. The case demonstrates that resilience is not simply holding more inventory. It requires network knowledge, quality and regulatory planning, cyber continuity, transparent communication, and investment before the crisis. It also shows why a supplier “relationship” must extend to critical sub-tiers and shared infrastructure.

8. Challenges and Limitations

Risk estimates are affected by incomplete data, changing conditions, confirmation bias and correlated events. Heat maps may create false confidence when ordinal scores are treated as precise. FMEA is often strongest for known process failures but weaker for novel systemic events. Diversification can increase supplier-management complexity and reduce volume leverage. Localisation may reduce transport exposure while increasing dependence on one regional ecosystem. Digital visibility can expose sensitive commercial information and enlarge the cyberattack surface.

Resilience also has distributional consequences. Inventory allocation during shortage can disadvantage smaller customers or vulnerable communities. Supplier audits may shift compliance costs to low-power suppliers without improving working conditions. Ethical risk management therefore requires stakeholder engagement, proportional requirements, remedy for harm and attention to human rights rather than only continuity of supply.

9. Best-Practice Implementation Roadmap

1. Define critical products, customers, services and risk appetite.
2. Map physical, information, financial and dependency networks beyond tier one.
3. Establish a consistent risk taxonomy and risk register.
4. Use heat maps for communication, FMEA for process failure and scenarios for systemic disruption.
5. Identify single points of failure and correlated exposures.
6. Select a balanced portfolio of buffers, alternatives, flexibility, visibility and collaboration.
7. Build continuity plans with owners, thresholds, RTOs, workarounds and communications.
8. Test plans and suppliers through realistic exercises.
9. Monitor leading indicators such as financial stress, quality drift, cyber anomalies, weather alerts, congestion and regulatory change.
10. Review outcomes after disruptions and update designs, contracts, training and investment priorities.

Chapter Summary

Global supply-chain risk arises from uncertainty across interconnected physical, digital, financial and institutional networks. Effective management distinguishes hazards, exposure, vulnerability, disruption, crisis, continuity and resilience. Risk registers, heat maps, expected-loss analysis, FMEA, scenario analysis and stress testing provide complementary perspectives, but each has limitations.

Resilient design combines appropriate redundancy, inventory and capacity buffers with flexibility, postponement, visibility, collaboration, geographic diversity and modularity. Business continuity translates criticality into recovery objectives, workarounds, responsibilities and tested procedures. Cyber, climate, geopolitical and human-rights risks require specialised controls and strong governance. The strategic objective is not to eliminate every risk, which is impossible, but to reduce unacceptable exposure, preserve options, respond ethically and learn faster than the environment changes.

Key Terms

Risk: Effect of uncertainty on objectives.

Hazard: Condition with potential to cause harm.

Exposure: Extent to which an organisation is subject to a hazard.

Vulnerability: Susceptibility of a system to damage or interruption.

Disruption: Event that interrupts normal supply-chain performance.

Crisis: Disruption requiring exceptional coordination and decisions.

Resilience: Capability to absorb, respond to, recover from and adapt after disruption.

Business continuity: Capability to maintain acceptable operations during interruption.

Redundancy: Availability of additional sources, capacity, assets or routes.

Flexibility: Ability to change volume, mix, source, route or design.

FMEA: Structured analysis of failure modes, effects and controls.

RPN: Product of severity, occurrence and detection scores in traditional FMEA.

Risk appetite: Amount and type of risk an organisation is willing to accept.

RTO: Target time to restore a process or service.

RPO: Maximum acceptable period of data loss.

MTPD: Maximum tolerable period of disruption.

Time to recover: Duration required to restore an agreed capability level.

Bullwhip effect: Amplification of demand variability upstream in a supply chain.

Single point of failure: Dependency whose loss can interrupt a critical flow.

Stress testing: Evaluation of performance under severe but plausible conditions.

Review Questions

Short Answer Questions

1. Distinguish supply-chain risk, vulnerability and disruption.
2. What are the three traditional components of FMEA scoring?
3. Explain the difference between RTO and RPO.
4. Why can geographic diversification fail to improve resilience?
5. Identify two cyber-continuity controls.

Long Answer Questions

1. Explain how redundancy, flexibility and visibility contribute differently to supply-chain resilience.
2. Describe a complete process for identifying and assessing global supply-chain risk.
3. Critically evaluate the usefulness and limitations of heat maps and FMEA.
4. Discuss how climate and geopolitical risks should influence network design.
5. Explain the governance requirements for an effective business-continuity programme.

Analytical / Application Questions

1. A firm has one approved supplier for a safety-critical component, low inventory and a six-month qualification process for alternatives. Develop a prioritised resilience plan and justify the sequence of actions.
2. Design a stress-test scenario combining a cyberattack, port closure and demand surge. Specify assumptions, performance measures, decision thresholds and recovery actions.
3. A supplier offers a 12% lower unit price but is located in a flood-prone region and shares a sub-tier with the existing supplier. Evaluate the decision using total cost, concentration risk, continuity and ethical considerations.

Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes resilience from business continuity?

A. Resilience concerns only cybersecurity, while continuity concerns physical logistics.

B. Resilience includes absorbing, responding, recovering and adapting; continuity focuses on maintaining acceptable operations during disruption.

C. Resilience eliminates all uncertainty, while continuity transfers uncertainty to insurers.

D. Resilience is a financial metric, while continuity is a supplier-contract clause.

Correct Answer: B. Resilience includes absorbing, responding, recovering and adapting; continuity focuses on maintaining acceptable operations during disruption.

Question 2

In the traditional FMEA risk priority number, which variables are multiplied?

A. Probability, cost and lead time

B. Capacity, demand and inventory

C. Severity, occurrence and detection

D. Recovery time, recovery point and service level

Correct Answer: C. Severity, occurrence and detection

Question 3

A supply-chain risk has probability 0.2 and consequence $50,000. What is its expected loss under a single-event model?

A. $2,500

B. $10,000

C. $50,000

D. $250,000

Correct Answer: B. $10,000

Question 4

Which condition is required for the simple safety-stock approximation SS = z σ_d √L?

A. Demand variation is independent by period and lead time is constant.

B. Demand is always zero during lead time.

C. Lead time and demand must be perfectly correlated.

D. The service factor must equal one in every situation.

Correct Answer: A. Demand variation is independent by period and lead time is constant.

Question 5

What does RPO primarily measure?

A. The time required to restore a process

B. The maximum acceptable period of data loss

C. The probability of supplier failure

D. The amount of safety stock required

Correct Answer: B. The maximum acceptable period of data loss

Question 6

Which is an example of a hidden single point of failure?

A. Two suppliers independently produce the same component in different countries.

B. Two suppliers both depend on the same undisclosed sub-tier producer.

C. A firm uses two unrelated transport modes.

D. A plant has cross-trained employees.

Correct Answer: B. Two suppliers both depend on the same undisclosed sub-tier producer.

Question 7

What is the principal purpose of stress testing?

A. To prove that historical averages are always accurate

B. To evaluate performance under severe but plausible conditions

C. To replace all operational data with expert opinion

D. To calculate only annual insurance premiums

Correct Answer: B. To evaluate performance under severe but plausible conditions

Question 8

Which action most directly improves cyber resilience in a supply chain?

A. Removing all supplier connectivity

B. Using least-privilege access, multifactor authentication and tested backups

C. Increasing finished-goods variety without changing systems

D. Relying exclusively on contractual force-majeure clauses

Correct Answer: B. Using least-privilege access, multifactor authentication and tested backups

Question 9

If an organisation’s MTPD is 48 hours, which relationship is necessary for a credible recovery plan?

A. RTO must be greater than 48 hours.

B. RTO must be equal to zero.

C. RTO should be no greater than 48 hours.

D. RPO must always be 48 hours.

Correct Answer: C. RTO should be no greater than 48 hours.

Question 10

Which resilience measure most directly reduces dependence on a single qualified supplier?

A. Dual qualification in a different hazard zone

B. Reducing supplier visibility

C. Increasing forecast error

D. Eliminating continuity exercises

Correct Answer: A. Dual qualification in a different hazard zone