13. Governance, Ethics, Compliance and Risk Financing

Introduction and Context

Supply-chain resilience is often discussed in terms of inventory, alternate suppliers, transport capacity and digital visibility. Yet these operational capabilities depend on a deeper institutional foundation: who is accountable for risk, which risks the organization is prepared to accept, how decisions are escalated, what conduct is permissible, and how severe financial consequences are absorbed or transferred. Governance, ethics, compliance and risk financing therefore connect strategic intent with operational resilience.

A supply chain may be technically diversified but strategically fragile if suppliers use forced labour, if managers conceal disruptions, if procurement decisions are affected by bribery, or if insurance and contracts allocate losses ambiguously. Conversely, strong governance does not eliminate uncertainty; it creates disciplined mechanisms for identifying uncertainty, making defensible choices and learning from adverse events.

This chapter examines governance structures and risk appetite, ethical and human-rights responsibilities, compliance and due diligence, disclosure and accountability, and the principal methods of financing supply-chain risk. The emphasis is managerial: students should be able to design escalation systems, evaluate contractual and financial protections, and recognize the trade-offs between cost, control and resilience.

Learning Objectives

By the end of this chapter, the learner should be able to:

1. Explain the role of governance in global supply-chain risk management.

2. Distinguish risk appetite, tolerance, capacity and limits.

3. Design accountability and escalation arrangements for supply-chain risk.

4. Evaluate human-rights, forced-labor, corruption and disclosure risks.

5. Describe compliance and supply-chain due-diligence processes.

6. Compare insurance, hedging, reserves and contractual risk transfer.

7. Apply governance and financing principles to a complex supply-chain scenario.

8. Assess the limitations and unintended consequences of risk-transfer decisions.

Governance as the Architecture of Accountability

Governance is the system through which an organization is directed, controlled and held accountable. In supply-chain risk management, it determines the relationship between the board, executive management, procurement, operations, finance, legal functions, internal audit, suppliers and other stakeholders. It also establishes how risk information travels upward and how decisions travel downward.

Operational risk ownership normally rests with the manager who controls the relevant process. A procurement director may own supplier-concentration risk; a logistics director may own transportation continuity; a chief information officer may own cyber risk affecting logistics systems. However, ownership does not mean isolation. Enterprise risks cross functional boundaries and require an executive risk committee or equivalent coordinating body.

The board’s role is not to approve every supplier or shipment. It is to set expectations, approve material risk policies, oversee management’s risk system and challenge whether information is reliable. Management converts these expectations into policies, controls, budgets and performance measures. Internal audit provides independent assurance that the system operates as intended, while compliance and legal functions interpret applicable obligations. External assurance may arise through certification, customer audits, regulators, insurers or independent assessors.

A useful governance design separates three responsibilities:

• Risk ownership: responsibility for managing a risk in day-to-day operations.
• Risk oversight: responsibility for reviewing exposure, performance and corrective action.
• Independent assurance: responsibility for testing whether controls and reporting are effective.

This separation reduces conflicts of interest. A procurement team should not be the sole judge of whether its supplier-screening controls are adequate, particularly where cost or delivery targets create pressure to overlook warning signs.

Risk Appetite, Tolerance and Capacity

Risk appetite is the amount and type of risk an organization is willing to pursue or retain in support of its objectives. Risk tolerance translates appetite into acceptable variation around a target. Risk capacity is the maximum exposure the organization can withstand before its financial position, legal standing, strategy or survival is threatened. A risk limit is a specific control threshold, such as a maximum percentage of spend allocated to one country or supplier.

These concepts should not be treated as interchangeable. A firm may have a moderate appetite for supplier concentration in a specialized technology, but its capacity to absorb a prolonged outage may be low. This mismatch requires mitigation, contingency planning or risk transfer. Appetite statements should combine qualitative principles with measurable indicators. Examples include:

• no tolerance for forced labour or deliberate falsification of compliance records;
• low tolerance for a single-source dependency where substitution exceeds a defined recovery period;
• a financial tolerance for disruption losses within an approved annual budget;
• defined limits for foreign-exchange exposure, uninsured cargo value or counterparty credit risk.

A mature appetite statement also identifies exceptions, authority levels and escalation triggers. Without thresholds, “low tolerance” becomes a slogan rather than a management instrument.

From Risk Identification to Escalation

Governance becomes operational through a repeatable decision process. A practical cycle begins with risk identification and assessment, proceeds to treatment and monitoring, and ends with reporting, escalation and review. The process should integrate enterprise risk management with business continuity, supplier management, compliance and financial planning rather than creating separate, competing registers.

Risk registers should describe the event, causes, consequences, existing controls, owner, indicators, treatment plan and residual exposure. Quantitative scoring can support comparison, but numerical ratings should not disguise uncertainty. A low-probability event with catastrophic consequences may deserve board attention even when its calculated score is modest.

Escalation should be based on pre-agreed criteria. These may include breach of a legal or ethical non-negotiable, projected loss above a financial threshold, expected recovery time beyond a critical limit, loss of a strategic supplier, material customer impact, adverse media attention, or inability to verify a supplier’s claims. Escalation pathways should specify who is contacted, within what time, with what information and who has authority to activate contingency measures.

A useful incident report distinguishes facts, assumptions and decisions. It records the time of detection, affected products and locations, known and suspected causes, immediate controls, financial exposure, stakeholder communications and unresolved questions. This discipline limits misinformation and supports later learning.

Boards should receive trend information rather than isolated operational anecdotes. Relevant indicators include concentration levels, overdue corrective actions, audit findings, supplier incidents, compliance breaches, recovery-test results, insurance gaps and risk-limit exceptions. Dashboards are valuable only when their definitions are stable and their data quality is understood.

Ethics in the Global Supply Chain

Ethics concerns the principles used to judge what ought to be done, not merely what is legal. Compliance with law is a minimum requirement; ethical conduct may require stronger action where law is incomplete, enforcement is weak or vulnerable stakeholders bear disproportionate harm.

Supply-chain ethical issues include worker safety, wages and working time, discrimination, freedom of association, privacy, environmental harm, community displacement, animal welfare, bribery, conflicts of interest and truthful communication. Global sourcing creates particular difficulties because legal standards, enforcement capacity and cultural expectations differ across jurisdictions. Cultural difference may explain a practice, but it does not automatically justify exploitation or corruption.

Human Rights and Forced Labour

Human-rights due diligence generally involves four linked activities: identifying actual and potential impacts, preventing or mitigating harm, tracking effectiveness and communicating how impacts are addressed. A credible program is risk-based. It gives greater attention to sectors, regions, recruitment systems and business relationships where vulnerability is high.

Forced labour can involve coercion, restriction of movement, retention of identity documents, debt bondage, deceptive recruitment, threats, withheld wages or abuse of vulnerability. A supplier’s signed code of conduct is not evidence that these risks have been controlled. Organizations should examine recruitment fees, labour brokers, wage records, grievance channels, worker interviews and subcontracting practices. Audits can assist, but announced audits may miss abuse and workers may fear retaliation. Remediation should prioritize worker safety and remedy rather than immediate disengagement in every case; abrupt termination can leave workers without income while failing to correct the underlying system.

Modern due diligence increasingly extends beyond first-tier suppliers. Raw materials, labour contractors, logistics providers and informal subcontractors may create significant exposure. Traceability is not identical to responsibility: knowing a supplier’s identity does not prove acceptable conduct, and lack of visibility does not remove the buyer’s responsibility to investigate reasonably.

Anti-corruption and Conflicts of Interest

Corruption risks arise in sourcing, customs, licensing, inspections, transport, warehousing and claims settlement. Controls include segregation of duties, competitive tendering, approval thresholds, supplier screening, gifts and hospitality rules, beneficial-ownership checks, accurate books and records, protected reporting channels and investigation procedures.

A conflict of interest may exist even without an actual bribe. Employees should disclose personal, family or financial relationships with suppliers, and organizations should establish rules for recusal and independent review. Incentive systems matter: unrealistic delivery or cost targets can encourage employees and suppliers to bypass controls. Ethical governance therefore aligns performance measures with lawful and responsible conduct.

Compliance, Disclosure and Due Diligence

Compliance is the structured effort to meet applicable laws, regulations, contractual commitments, standards and internal policies. Supply-chain compliance may cover customs, sanctions and export controls, product safety, competition law, environmental obligations, labour standards, data protection, tax, anti-bribery requirements and disclosure rules.

Due diligence is more than document collection. It is a process of learning, judging and acting. A robust process commonly includes:

1. mapping suppliers, products, locations and intermediaries;

2. screening inherent risks by sector, country, product and relationship;

3. obtaining proportionate information and evidence;

4. assessing controls and identifying gaps;

5. applying treatment, such as remediation, capacity building, substitution or suspension;

6. monitoring changes and adverse signals;

7. documenting decisions and communicating material outcomes.

The principle of proportionality is important. A small low-risk supplier should not face the same administrative burden as a strategic supplier operating through labour brokers in a high-risk environment. However, proportionality must not become an excuse for ignoring small suppliers that collectively create material exposure.

Disclosure creates a further governance challenge. Public statements about ethical sourcing, carbon performance or supply-chain resilience can create legal, reputational and investor risk if they are vague, exaggerated or unsupported. Organizations should establish evidence standards, approval controls and clear ownership for sustainability and resilience claims. Material adverse information should not be hidden through selective reporting. At the same time, disclosure must respect personal data, commercial confidentiality and legitimate security concerns.

Whistleblowing systems are essential where formal reporting lines are distrusted. Effective systems offer confidentiality or anonymity where lawful, protection from retaliation, independent investigation and feedback on outcomes. A hotline without credible protection may increase risk by creating the appearance of control while discouraging genuine reporting.

Risk Financing: Keeping, Sharing and Transferring Loss

Risk financing concerns how an organization funds the financial consequences of adverse events. It complements, but does not replace, risk prevention and resilience. A company cannot insure away unsafe working conditions, poor governance or an unavailable substitute supplier. Financial protection is useful only when the insured or contractually protected event is clearly defined and the organization can meet its obligations during the disruption.

The principal options are retention, reserves, insurance, hedging, contractual transfer and external financing. Retention may be deliberate, through a budgeted loss fund or deductible, or accidental, through an uninsured exposure. Small, frequent and predictable losses are often economical to retain. Large, infrequent and volatile losses may justify insurance or other transfer mechanisms. The decision should consider expected loss, variability, liquidity, risk appetite, correlation across exposures, transaction cost and the organization’s ability to control the event.

Insurance

Relevant forms of insurance may include marine cargo, property damage and business interruption, contingent business interruption, trade credit, political risk, cyber, product liability, errors and omissions, directors’ and officers’ liability, and environmental liability. Coverage depends on definitions, exclusions, deductibles, waiting periods, sublimits, conditions precedent and proof of loss.

Business interruption insurance generally requires careful analysis of the insured damage, interruption period, affected revenue, additional expenses and applicable exclusions. Contingent business interruption may respond to disruption at a supplier or customer, but the policy may require the affected entity or location to be specifically identified. Pandemic, cyber, war, sanctions and government-action exclusions can materially change the protection assumed by managers.

Insurance procurement should therefore begin with an exposure map, not a search for the cheapest premium. Organizations should test policy wording against plausible scenarios, evaluate insurer credit quality, understand claims procedures and coordinate coverage with business continuity plans. Over-insurance can waste capital, while under-insurance creates false confidence.

Hedging and Financial Instruments

Hedging manages market-price uncertainty rather than physical failure. Foreign-exchange forwards, futures, options and swaps can reduce the impact of currency movements on imported materials or foreign revenues. Commodity futures, options and structured contracts may manage exposure to fuel, metals, energy or agricultural prices. Interest-rate hedges may be relevant where working-capital or infrastructure financing is material.

A hedge should be linked to an identifiable exposure, approved under a policy and monitored for effectiveness, liquidity and counterparty risk. Derivatives do not eliminate uncertainty; they exchange one set of risks for others, including basis risk, margin requirements, model risk, accounting complexity and the possibility of over-hedging. A procurement department that hedges forecast volumes without reliable demand information may create speculative positions.

Contractual Risk Transfer

Contracts allocate responsibilities, incentives and financial consequences. Important mechanisms include indemnities, warranties, liability caps, service-level credits, liquidated damages, insurance requirements, performance bonds, parent guarantees, force-majeure clauses, change-in-law provisions, audit rights, termination rights and business-continuity obligations.

Incoterms allocate certain delivery costs, risks and responsibilities in international sales, but they do not by themselves settle every issue of title, payment, quality, liability or regulatory compliance. Contract drafters must connect delivery terms with insurance, customs responsibility, documentation and transfer of risk.

A contractual transfer is effective only when the counterparty has the financial capacity and willingness to perform. An unlimited indemnity from a weak supplier may be less valuable than a realistic cap supported by insurance and financial security. Contracts should also address subcontracting, sanctions, human-rights standards, notification duties, data security, audit access and cooperation during disruption.

Integrating Governance with Financial Resilience

Risk financing decisions should be made through a total-cost and total-risk perspective. For example, a low-cost supplier may create higher expected costs through quality failures, ethical remediation, disruption and insurance exclusions. Conversely, requiring every supplier to maintain extensive insurance may reduce the available supplier base and increase prices without materially improving recovery.

A practical decision sequence is to prevent and reduce exposure first, prepare continuity measures second, retain manageable losses third, and transfer residual catastrophic or volatile exposures where economically justified. Scenario analysis can compare alternatives. For each scenario, managers should estimate gross loss, mitigation effect, retained loss, transferred loss, time to liquidity and non-financial consequences.

Risk-adjusted supplier evaluation can combine cost, resilience, compliance and financial strength. A weighted score should not mechanically replace judgment; it should make assumptions visible. Procurement, finance, legal, operations, sustainability and risk functions should jointly approve material allocations of exposure.

Digital tools support this integration. Supplier platforms can consolidate ownership, certifications, sanctions screening, audit findings and incident data. Process-mining and analytics can identify unusual payments, repeated delivery exceptions or control overrides. Artificial intelligence may assist document review and adverse-media screening, but it can produce false positives, miss local-language information, reproduce bias and expose confidential data. Human review, data governance, explainability and escalation remain necessary.

Illustrative Case: The Meridian Electronics Supply Network

Background

Meridian Electronics, a fictional multinational manufacturer of industrial control units, sources circuit boards from two principal suppliers in different countries. A third supplier provides only five percent of volume but is approved for emergency use. Meridian’s board has approved a low appetite for forced-labour and corruption risk and a moderate appetite for supplier concentration where technical qualification is difficult.

Situation

An investigative report alleges that a labour intermediary used by Meridian’s largest supplier retained recruitment fees and identity documents. At the same time, a port closure affects the supplier’s region. The procurement team proposes immediate termination to protect Meridian’s reputation. Operations warns that termination will create a six-month production gap. Finance discovers that contingent business-interruption coverage may not respond because the supplier’s site was not named in the policy. The company also has a currency hedge based on forecast purchases that will no longer occur.

Analysis

The case contains connected ethical, operational, legal and financial risks. The alleged labour abuse is a potential non-negotiable breach, but immediate disengagement may harm affected workers and reduce access to evidence. The port closure creates a continuity event, while the insurance uncertainty exposes a governance weakness. The hedge creates potential over-hedging and termination costs. The board’s appetite statement requires escalation because both a human-rights red flag and a material continuity exposure are present.

Approach

Meridian activates its incident committee, separates verified facts from allegations and appoints an independent investigator. It requires the supplier to preserve records, provide access to workers and suspend the intermediary pending investigation, while establishing a worker-remediation plan. A temporary production allocation is shifted to the emergency supplier after technical and quality checks. Meridian informs major customers without making unverified public claims.

Legal and finance review the insurance wording and notify the insurer within policy deadlines. Treasury reduces or closes the excess currency hedge according to policy and documents the basis risk. Procurement negotiates a corrective-action agreement containing worker-protection requirements, audit access, subcontractor disclosure, termination triggers and financial security. The board receives a report on the incident, exposure, decisions and control failures.

Outcome

The investigation confirms recruitment-fee violations but finds no evidence that the supplier’s senior management authorized the practice; nevertheless, Meridian requires remediation, reimbursement and independent monitoring. Production continues at reduced capacity, and the emergency supplier is qualified for a larger share over time. The insurer rejects part of the contingent-interruption claim because of the policy wording, prompting a redesign of insurance specifications and supplier-location schedules.

Learning Points

The case demonstrates that ethical due diligence is a continuing management process, not a one-time certification. It also shows why risk transfer must be tested against actual scenarios, why financial hedges require reliable volume forecasts, and why escalation should connect procurement, operations, finance, legal, sustainability and board oversight. Responsible disengagement may sometimes be necessary, but it should not be an automatic substitute for remedy and system improvement.

Challenges and Common Mistakes

Several recurring failures weaken governance. First, organizations may assign accountability without granting authority, leaving risk owners unable to change suppliers, budgets or processes. Second, risk appetite may be expressed in broad language without measurable limits. Third, supplier audits may focus on paperwork and facilities while missing recruitment practices, subcontracting and worker experience. Fourth, companies may over-rely on contractual clauses that are difficult to enforce across jurisdictions.

Other mistakes include purchasing insurance without reading exclusions, treating a certificate as proof of ethical performance, hedging forecasts as though they were firm commitments, ignoring counterparty credit risk, and assuming that disclosure is merely a communications function. Excessive compliance bureaucracy can also create superficial “tick-box” behaviour and burden smaller suppliers without improving outcomes.

A further limitation is imperfect information. Supply chains are dynamic, and beneficial ownership, subcontracting and labour conditions can change quickly. Ratings and automated screening tools may simplify complex judgments. Managers should therefore preserve professional scepticism and combine data with local knowledge, worker voice and independent assurance.

Current Developments and Best Practices

Regulators and markets increasingly expect organizations to demonstrate risk-based due diligence, supply-chain transparency and credible sustainability claims. Requirements differ across jurisdictions and change over time, so organizations should maintain a legal-obligations register and obtain qualified advice for applicable markets. The direction of development is toward greater accountability for value-chain impacts rather than reliance solely on direct contractual partners.

Strong practice includes:

• board-approved appetite statements linked to measurable limits;
• named risk owners, independent assurance and documented escalation;
• integrated supplier, human-rights, compliance and resilience mapping;
• worker-accessible grievance and remedy mechanisms;
• evidence-based public claims and controlled disclosure;
• scenario testing of insurance, hedges and contractual protections;
• periodic review of exclusions, counterparty strength and policy limits;
• supplier capability-building alongside sanctions for serious misconduct;
• post-incident reviews that examine governance causes, not only operational symptoms.

The strategic objective is not to eliminate every exposure. It is to make exposure visible, decisions accountable, conduct defensible and financial consequences survivable.

Chapter Summary

Governance provides the architecture through which supply-chain risks are owned, overseen, escalated and assured. Risk appetite, tolerance, capacity and limits translate strategy into decision boundaries. Ethical supply-chain management extends beyond legal compliance to human rights, forced-labour prevention, anti-corruption, worker voice and responsible remedy. Due diligence requires mapping, risk assessment, treatment, monitoring and communication, supported by reliable evidence.

Risk financing determines how losses are retained, reserved, insured, hedged or transferred through contracts. Insurance wording, exclusions, deductibles and counterparty strength must be tested against realistic scenarios. Hedging manages price and currency uncertainty but introduces basis, liquidity and over-hedging risks. Contracts can allocate risk, but clauses are valuable only when clear, enforceable and supported by capable counterparties. Effective resilience integrates governance, ethical conduct, compliance and finance rather than treating them as separate programs.

Key Terms

Risk governance: The structures and processes used to direct, control and oversee risk.

Risk appetite: The amount and type of risk an organization is willing to pursue or retain.

Risk tolerance: The acceptable variation around a defined objective or exposure.

Risk capacity: The maximum risk an organization can absorb without threatening its viability or strategy.

Risk limit: A specific quantitative or qualitative boundary placed on an exposure.

Risk owner: The manager accountable for controlling a particular risk.

Independent assurance: Objective evaluation of whether governance and controls operate effectively.

Due diligence: A continuing process of identifying, assessing, addressing and communicating risks and impacts.

Forced labour: Work obtained through coercion, threats, deception, debt bondage or other forms of involuntary control.

Modern slavery: Severe exploitation involving forced labour, trafficking or related coercive practices.

Remediation: Actions taken to correct harm and provide an appropriate remedy to affected parties.

Conflict of interest: A situation in which personal interests may improperly influence professional judgment.

Compliance: Meeting applicable laws, regulations, contracts, standards and internal policies.

Risk retention: Deliberately or accidentally bearing the financial consequences of a risk.

Contingent business interruption: Loss coverage arising from disruption at a specified supplier or other dependent business.

Hedging: Using financial or contractual instruments to reduce exposure to market-price movements.

Basis risk: The risk that a hedge does not move sufficiently with the underlying exposure.

Indemnity: A contractual promise to compensate another party for specified loss or liability.

Liquidated damages: A pre-agreed sum payable when a defined contractual failure occurs.

Risk transfer: Allocating financial consequences of risk to another party through insurance, contracts or financial instruments.

Review Questions

Short Answer Questions

1. Distinguish risk appetite from risk capacity.

2. What are the three main forms of responsibility in supply-chain risk governance?

3. Why is a supplier code of conduct insufficient evidence that forced labour has been prevented?

4. Define basis risk in relation to hedging.

5. Identify two factors that should be examined before relying on contractual risk transfer.

Long Answer Questions

1. Explain how a board and executive management should divide responsibilities for global supply-chain risk oversight.

2. Discuss the stages of a risk-based human-rights due-diligence process.

3. Compare insurance, retention and contractual risk transfer as methods of financing supply-chain risk.

4. Explain how anti-corruption controls and incentive systems influence supply-chain resilience.

5. Discuss why disclosure of resilience and sustainability information creates both accountability and risk.

Analytical / Application Questions

1. A company relies on one overseas supplier for 60 percent of a critical component. Design an escalation and risk-financing response consistent with a moderate risk appetite and low liquidity.

2. A supplier is accused of using recruitment fees and subcontracting labour without disclosure. Should the buyer terminate immediately? Develop a reasoned decision framework.

3. A firm hedges forecast purchases of fuel, but demand falls sharply after a disruption. Analyze the resulting risks and recommend governance improvements.

22. Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes risk appetite from risk capacity?

A. Risk appetite is the maximum legal exposure, while capacity is the preferred exposure.

B. Risk appetite is the willingness to accept risk, while capacity is the maximum exposure the organization can withstand.

C. Risk appetite applies only to financial risks, while capacity applies only to operational risks.

D. Risk appetite is set by suppliers, while capacity is set by insurers.

Correct Answer: B. Risk appetite is the willingness to accept risk, while capacity is the maximum exposure the organization can withstand.

Question 2

A supplier’s signed ethical code is available, but workers report recruitment fees and withheld identity documents. What is the most appropriate conclusion?

A. The code proves that the supplier is compliant.

B. The issue is irrelevant if delivery performance is satisfactory.

C. Further evidence-based due diligence and potential remediation are required.

D. The buyer must immediately terminate without investigation.

Correct Answer: C. Further evidence-based due diligence and potential remediation are required.

Question 3

Which function primarily provides independent assurance that supply-chain controls operate effectively?

A. Internal audit

B. Sales management

C. The freight forwarder

D. The supplier’s marketing department

Correct Answer: A. Internal audit

Question 4

What is a major limitation of relying on an unlimited indemnity from a financially weak supplier?

A. It prevents the buyer from conducting audits.

B. The supplier may lack the capacity to pay the promised compensation.

C. It automatically eliminates insurance requirements.

D. It converts operational risk into currency risk.

Correct Answer: B. The supplier may lack the capacity to pay the promised compensation.

Question 5

Which situation most clearly represents over-hedging?

A. Hedging a firm purchase order against currency movements

B. Insuring cargo during international transportation

C. Taking a currency position for forecast purchases that are later cancelled

D. Using a deductible to retain small losses

Correct Answer: C. Taking a currency position for forecast purchases that are later cancelled

Question 6

Why should risk appetite statements include measurable limits?

A. To eliminate the need for management judgment

B. To convert broad preferences into operational decision boundaries

C. To transfer all risks to suppliers

D. To ensure every supplier receives identical treatment

Correct Answer: B. To convert broad preferences into operational decision boundaries

Question 7

In the illustrative Meridian case, why was immediate supplier termination not the only reasonable response?

A. Ethical allegations can never justify action.

B. Termination might harm workers and reduce the possibility of investigation and remedy.

C. Insurance always requires continued purchasing.

D. Port closures make contracts legally irrelevant.

Correct Answer: B. Termination might harm workers and reduce the possibility of investigation and remedy.

Question 8

Which insurance feature can materially restrict a contingent business-interruption claim?

A. A supplier location that is not identified or covered under the policy

B. A documented business-continuity plan

C. A defined claims procedure

D. A financially strong insurer

Correct Answer: A. A supplier location that is not identified or covered under the policy

Question 9

What is the principal purpose of escalation criteria?

A. To delay operational decisions until the board meets

B. To specify when, how and to whom material risks must be reported

C. To replace all local supplier management

D. To guarantee that disruptions never occur

Correct Answer: B. To specify when, how and to whom material risks must be reported

Question 10

Which approach best reflects mature supply-chain risk financing?

A. Transfer every risk regardless of cost or feasibility.

B. Retain all risks because insurance cannot prevent disruptions.

C. Reduce exposure first, retain manageable losses and transfer residual catastrophic or volatile exposures where justified.

D. Use derivatives to eliminate all uncertainty.

Correct Answer: C. Reduce exposure first, retain manageable losses and transfer residual catastrophic or volatile exposures where justified.