Global Supply Chains, Risk and Resilience

Introduction

Global supply chains connect suppliers, manufacturers, logistics providers, distributors, regulators and customers across jurisdictions. Their international reach creates access to lower costs, specialist capabilities and larger markets, but also exposes firms to disruption. A pandemic, port closure, cyberattack, export restriction, extreme weather event, supplier insolvency or reputational scandal can interrupt material, information and financial flows simultaneously.

Strategic supply chain management therefore requires more than efficiency. It requires the ability to anticipate threats, absorb shocks, continue critical operations and recover without permanently damaging customers, employees, communities or the environment. This chapter develops a structured approach to risk assessment and resilience design using risk mapping, heat maps, failure mode and effects analysis (FMEA), stress testing and scenario analysis. It then connects these methods to continuity, redundancy, flexibility, visibility and recovery strategies, interpreted through the Triple-A framework: agility, adaptability and alignment.

Learning Objectives

By the end of this chapter, the learner should be able to:

1. Explain the strategic nature of global supply chain risk and resilience.
2. Classify geopolitical, trade, cyber, climate, supplier, operational and reputational risks.
3. Apply risk registers, heat maps, FMEA, stress testing and scenario analysis.
4. Distinguish efficiency, robustness, resilience and antifragility.
5. Design continuity, redundancy, flexibility, visibility and recovery responses.
6. Evaluate risk decisions using financial, operational, ethical and governance criteria.

1. Globalisation and Supply Chain Vulnerability

A supply chain is a network rather than a simple linear chain. It contains nodes—such as plants, warehouses, ports and suppliers—and links, including transport routes, information systems, contracts and financial relationships. Risk can originate at any tier and propagate through the network.

Globalisation increases several forms of exposure:

• Geographic exposure: production or logistics concentrated in one country, region, port or climate zone.
• Dependency exposure: dependence on a single supplier, technology platform, carrier or raw material.
• Temporal exposure: long lead times and limited time to respond.
• Information exposure: incomplete knowledge of lower-tier suppliers, inventory and in-transit goods.
• Institutional exposure: differences in laws, sanctions, customs procedures, labour standards and enforcement.

Efficiency practices such as lean inventories, single sourcing and high asset utilisation reduce ordinary operating cost but may reduce slack. The strategic question is not whether slack is always desirable; it is whether the cost of slack is justified by the probability and consequence of disruption.

2. Risk, Disruption and Resilience

Supply chain risk is the possibility that an uncertain event will adversely affect supply chain objectives. A disruption is the realised event, while resilience is the capability to prepare for, respond to and recover from disruption while maintaining acceptable performance.

Resilience has four dimensions:

1. Anticipation: identifying weak signals, dependencies and plausible threats.
2. Absorption: continuing critical activity during a shock.
3. Adaptation: changing sourcing, production, routing or service policies.
4. Recovery: restoring capability and learning from the event.

A resilient supply chain is not necessarily the most redundant or expensive system. It is one whose design is appropriate to the consequences of failure and the organisation’s risk appetite. Robustness means performing acceptably under a range of conditions; resilience emphasises recovery and adaptation; agility emphasises rapid response; and antifragility describes systems that improve as a result of volatility, although this term should be used cautiously in managerial analysis.

The Triple-A Supply Chain

The Triple-A model identifies three mutually reinforcing capabilities:

• Agility: responding quickly to short-term changes in demand or supply.
• Adaptability: redesigning the network, products, processes or business model as conditions change.
• Alignment: coordinating incentives, information and objectives across supply chain partners.

Agility without alignment may produce local decisions that damage the network. Adaptability without agility may be too slow for an unfolding crisis. Alignment without either may create agreement without effective action.

3. Major Categories of Global Supply Chain Risk

Geopolitical and Trade Risk

Geopolitical risk includes conflict, political instability, sanctions, diplomatic tension, expropriation and border restrictions. Trade risk includes tariffs, quotas, export controls, customs changes, rules-of-origin requirements and restrictions on strategic technologies or minerals.

Managers should identify country and corridor exposure, assess alternative routes and suppliers, monitor regulatory developments, and verify that contracts address sanctions, force majeure, customs responsibility and change-in-law events. Compliance must never be treated as a purely legal formality: an apparently low-cost source can become unavailable or unlawful.

Cyber and Information Risk

Cyber risk affects enterprise resource planning systems, warehouse systems, transport management platforms, supplier portals, industrial control systems and customer data. A ransomware attack may stop physical operations even when factories and vehicles remain intact.

Controls include multifactor authentication, network segmentation, least-privilege access, secure backups, patch management, incident-response exercises, supplier cyber assessments and manual workarounds. Cyber resilience also depends on data integrity. Incorrect master data, manipulated orders or falsified certificates can create operational and safety consequences.

Climate and Environmental Risk

Climate risk has two related elements. Physical risk arises from floods, heat, storms, drought, wildfire and water scarcity. Transition risk arises from carbon regulation, changing technology, investor expectations and shifts in customer demand.

Assessment should combine site-level hazard data with business impact analysis. A facility outside a flood zone may still be vulnerable if its sole access road, electricity substation or key supplier is exposed. Climate planning should consider both acute events and chronic changes such as rising temperatures or water stress.

Supplier and Financial Risk

Supplier risk includes capacity failure, quality problems, insolvency, labour disputes, ethical violations, weak cyber controls and dependence on a supplier’s own sub-tier sources. Financial indicators may include liquidity, leverage, payment behaviour and credit exposure, but financial health alone does not reveal operational criticality.

A small supplier may be financially stable yet irreplaceable because it owns a specialised process. Conversely, a large supplier may be replaceable if qualified alternatives exist. Risk assessment must therefore combine probability, impact, detectability, substitutability and time to recover.

Operational and Logistics Risk

Operational risk includes equipment breakdown, poor maintenance, quality failure, labour shortages, inaccurate forecasts, warehouse congestion, transport delay and inadequate capacity. Logistics risk includes port closures, carrier failure, route disruption, fuel volatility and loss or damage in transit.

Bottlenecks deserve particular attention. A single constrained machine, certification laboratory or customs point can limit the entire network even when overall capacity appears sufficient.

Reputational and Social Risk

Reputational risk can arise from unsafe products, forced labour, environmental damage, corruption, misleading sustainability claims or poor treatment of workers and communities. Reputational damage can reduce sales, attract regulatory action and cause suppliers, employees or investors to withdraw.

Due diligence should extend beyond first-tier suppliers where risk warrants it. Organisations should establish grievance channels, audit high-risk activities, investigate allegations and avoid treating social responsibility as a public-relations exercise.

4. Risk Identification and Mapping

A practical risk process begins with a network map. The map should show suppliers by tier, production sites, transport modes, ports, warehouses, information dependencies, critical materials and customers. Each node should be linked to ownership, location, capacity, lead time and recovery alternatives.

A risk register then records the event, cause, affected process, consequences, existing controls, owner, indicators and planned treatment. Risk statements should be specific. “Supplier risk” is too broad; “the sole supplier of the microcontroller may be unable to ship for eight weeks because of export licensing restrictions” is actionable.

Heat Maps

A heat map typically scores probability and impact on ordinal scales, for example from 1 (very low) to 5 (very high). A simple risk score is:

where P is the probability score and I is the impact score. The score is dimensionless when both inputs are ordinal ratings. It is a prioritisation device, not a precise probability estimate. A score of 20 does not mean that the risk is twice as serious as a score of 10 unless the organisation has explicitly defined the scale that way.

Impact may be assessed across several dimensions—financial loss, service failure, safety, legal exposure, recovery time and reputation. A weighted score can be used when governance approves the weights:

Here I_j is the impact rating for dimension j, w_j is its weight, and the weights sum to one. This approach improves transparency but does not eliminate judgement.

Expected Loss

Where probability data are credible, expected loss can support economic comparison:

where p_k is the probability of scenario k and L_k is its monetary loss. The probabilities should cover mutually exclusive scenarios and normally sum to one. Expected loss can understate catastrophic risk because decision makers may be risk-averse and because the estimate may omit strategic, human or reputational consequences.

5. FMEA for Supply Chain Processes

Failure Mode and Effects Analysis examines how a process can fail. For each failure mode, teams assess:

• Severity (S): consequence if the failure occurs.
• Occurrence (O): likelihood or frequency of the cause.
• Detection (D): likelihood that existing controls will fail to detect the problem before impact; a high score means poor detectability.

The traditional risk priority number is:

Scores are usually ordinal, commonly 1 to 10. RPN is useful for structured discussion but has limitations: multiplication treats ordinal scales as if their intervals were equal, different combinations can produce the same result, and a very severe failure can be obscured by modest occurrence or detection scores. Teams should therefore review severity separately and not rank solely by RPN.

Illustration: Suppose a sole-source component shortage receives S = 9, O = 4 and D = 8. Its RPN is 288. A packaging-label error receives S = 5, O = 6 and D = 4, giving 120. The shortage deserves attention not only because its RPN is higher but because its severity and poor detectability are strategically significant.

FMEA is most effective when it identifies preventive controls, detection controls, responsible owners and target dates rather than merely producing scores.

6. Stress Testing and Scenario Analysis

Stress testing asks whether the supply chain can withstand a defined adverse condition. Examples include a 30-day port closure, a 50% demand increase, loss of a critical supplier, a cyber shutdown or simultaneous disruption of two transport corridors.

Scenario analysis explores coherent combinations of events and responses. Scenarios should be plausible, internally consistent and sufficiently different to challenge assumptions. They may include:

• a fragmented-trade scenario with tariffs and export controls;
• a climate-intensification scenario with repeated regional disruption;
• a cyber-contagion scenario affecting shared logistics platforms;
• a demand-volatility scenario involving rapid growth followed by contraction.

A stress test should specify the shock, time horizon, affected nodes, decision rules, available capacity, customer priorities and recovery assumptions. Results should identify the point at which service, cash flow, safety or compliance becomes unacceptable.

Useful measures include:

• Time to survive (TTS): how long the network can continue before a critical input is exhausted;
• Time to recover (TTR): time required to restore an acceptable operating level;
• service loss: unmet demand, delayed orders or lost production;
• recovery cost: premium freight, alternate sourcing, overtime and requalification;
• resilience curve: performance loss and recovery over time.

Inventory-based TTS can be approximated under stable consumption by:

where A is usable available inventory in units and d is average consumption in units per unit of time. The approximation assumes inventory is usable, demand is reasonably stable, replenishment is unavailable and no allocation policy changes consumption. For example, 12,000 units at 800 units per day provide 15 days of cover, not 15 days of guaranteed service if demand surges or inventory is defective.

7. Designing Resilience Strategies

Continuity and Business Impact Analysis

Business continuity begins by identifying critical products, processes and customers. A business impact analysis establishes maximum tolerable downtime, recovery time objectives, recovery point objectives for data, minimum staffing and minimum capacity. Plans should include escalation thresholds, decision authority, communications, alternate facilities, emergency procurement and customer prioritisation.

A plan that exists only in a document is inadequate. Exercises should test contact lists, data restoration, manual processing, supplier substitution and executive decision-making.

Redundancy and Multi-Sourcing

Redundancy provides alternatives: multiple suppliers, plants, carriers, data centres, energy sources or routes. It may involve dual sourcing, regional manufacturing or strategic buffer inventory. However, nominal multi-sourcing can be misleading if suppliers share the same sub-tier source, port, cloud platform or geographic hazard. Effective redundancy requires independence and qualification.

The economic decision compares the cost of alternative capacity with avoided disruption consequences. Qualification, tooling, minimum order quantities and intellectual-property constraints may make redundancy difficult. Firms should reserve redundancy for high-criticality exposures rather than duplicate every activity.

Flexibility and Postponement

Flexibility allows volume, mix, routing or sourcing to change. Examples include modular product design, common components, cross-trained employees, flexible contracts, postponement of final configuration and interchangeable transport modes.

Postponement delays product differentiation until demand information is better known. It reduces finished-goods variety but may require modular design, late-stage capacity and reliable information. Flexibility is valuable only when decision rights, supplier capability and information systems permit rapid execution.

Visibility and Digital Control Towers

Visibility means timely, accurate and actionable information about orders, inventory, capacity, location, quality and risk. A digital control tower may integrate enterprise, supplier, logistics and external data to identify exceptions. Artificial intelligence can support anomaly detection, demand sensing and scenario generation, but it cannot compensate for poor data governance or unclear accountability.

Important controls include data ownership, common definitions, cybersecurity, model validation, human review and protection of confidential supplier information. A highly visible network can still be vulnerable if leaders lack authority to act.

Recovery and Learning

Recovery requires predefined alternatives, rapid qualification, emergency logistics, financial liquidity and transparent stakeholder communication. After disruption, organisations should conduct a learning review: what assumptions failed, which signals were missed, which controls worked, and what investment is justified?

Resilience maturity should be measured over time. Suitable indicators include critical suppliers with validated alternatives, percentage of tier-two visibility, median TTR, exercise completion, data recovery success, supplier financial coverage and closure of corrective actions.

8. Illustrative Case: Meridian Medical Devices

Background

Meridian Medical Devices, a fictional manufacturer, produces infusion pumps using a specialised sensor purchased from one supplier in Country A. Final assembly occurs in Country B, and products are distributed globally. The sensor supplier is financially sound, but its plant relies on a single regional semiconductor foundry and one export route.

Problem

A new export-control rule delays sensor shipments. At the same time, a cyberattack disrupts Meridian’s supplier portal. The company has 18,000 usable sensors in inventory and consumes approximately 1,200 per day. Hospitals have contractual priority, and a substitute sensor requires regulatory requalification.

Analysis

The immediate inventory cover is:

The risk register identifies high impact, low detectability and poor substitutability. A network map reveals that the apparent dual sourcing of semiconductors is not genuine: both sources depend on the same foundry. FMEA therefore gives the sensor shortage a high severity and high detection score. A stress test models a 30-day export delay and a simultaneous 10-day information-system outage.

Approach

Meridian adopts a layered response:

1. allocate existing sensors to hospital-critical orders;
2. establish a secure manual ordering channel while restoring systems;
3. use air freight only for qualified emergency shipments;
4. negotiate government-supported export licensing;
5. accelerate regulatory validation of a second sensor;
6. redesign the product to accept a common sensor interface;
7. audit sub-tier foundry and route dependencies;
8. create a strategic buffer based on validated TTR rather than an arbitrary weeks-of-supply target.

Outcome

The company avoids a complete production stop, although lower-priority orders are delayed. The medium-term redesign reduces component dependence, and future supplier assessments include sub-tier concentration, cyber recovery and regulatory exposure. The case demonstrates that resilience is not simply holding more inventory. It combines visibility, prioritisation, flexible design, alternative capability, governance and recovery learning.

9. Governance, Ethics and Regulation

Risk decisions distribute consequences. Prioritising profitable customers over patients, workers or vulnerable communities may be financially rational in the short term but ethically unacceptable. Continuity plans should therefore define principles for customer allocation, worker safety, emergency procurement and truthful communication.

Boards and senior managers should approve risk appetite, critical dependencies and investment thresholds. Procurement should not transfer all risk through harsh contracts while ignoring supplier viability. Data sharing must respect privacy, competition law, intellectual property and cybersecurity obligations. Environmental and labour due diligence should be integrated into sourcing decisions, not added after commercial selection.

Regulatory requirements vary by sector and jurisdiction, but commonly concern product safety, customs, sanctions, critical infrastructure, privacy, cyber security, financial reporting and modern slavery. Organisations must obtain current legal advice rather than rely on generic risk templates.

10. Limitations and Best Practices

No method predicts the future exactly. Heat maps can create false precision; FMEA may overlook network interactions; stress tests may use unrealistic assumptions; scenario planning can become a storytelling exercise; and expected-loss calculations may undervalue catastrophic or irreversible harm.

Best practice is therefore to:

• combine qualitative judgement with reliable quantitative data;
• assess common-cause and sub-tier dependencies;
• distinguish inherent risk from residual risk after controls;
• include cross-functional and external participants;
• test plans through simulations and live exercises;
• link risk indicators to accountable decision rights;
• update assessments after structural or regulatory change;
• balance cost efficiency with service, safety, ethics and resilience;
• document assumptions and uncertainty.

Chapter Summary

Global supply chains create strategic value but expose organisations to geopolitical, trade, cyber, climate, supplier, operational and reputational disruption. Resilience is the capability to anticipate, absorb, adapt and recover. Risk mapping reveals network dependencies; heat maps prioritise probability and impact; FMEA examines process failure modes; stress testing examines defined shocks; and scenario analysis explores coherent alternative futures.

Effective resilience combines continuity planning, selective redundancy, flexibility, postponement, visibility, cyber control and recovery capability. The Triple-A model explains why agility, adaptability and alignment must operate together. Quantitative tools such as expected loss, RPN and time-to-survive support decisions but do not replace judgement. Governance must address ethics, safety, regulatory compliance, data protection and the interests of vulnerable stakeholders. The strategic objective is not to eliminate all risk, but to design a supply network whose critical services can continue and recover at an acceptable cost.

Key Terms

Supply chain risk: Uncertainty that may adversely affect supply chain objectives.

Disruption: A realised event that interrupts normal supply chain activity.

Resilience: Capability to prepare, absorb, adapt and recover from disruption.

Robustness: Ability to perform acceptably across varied conditions.

Agility: Ability to respond rapidly to short-term change.

Adaptability: Ability to redesign structures or processes for changed conditions.

Alignment: Coordination of incentives, information and objectives among partners.

Risk register: Structured record of risks, controls, owners and treatments.

Heat map: Visual prioritisation of risk using probability and impact ratings.

FMEA: A method for analysing potential process failure modes and effects.

RPN: Product of severity, occurrence and detection ratings in traditional FMEA.

Stress test: Assessment of performance under a specified adverse shock.

Scenario analysis: Exploration of plausible, coherent future conditions.

Time to survive: Period before disruption exhausts critical available resources.

Time to recover: Time needed to restore acceptable performance.

Redundancy: Provision of alternative capacity, sources, routes or systems.

Postponement: Delaying final differentiation until demand information improves.

Visibility: Timely, accurate information about supply chain status and risk.

Common-cause dependency: Different alternatives exposed to the same underlying failure.

Business continuity: Planned capability to maintain and restore critical operations.

Review Questions

Short Answer Questions

1. Define supply chain resilience and distinguish it from robustness.
2. What are the three capabilities in the Triple-A supply chain?
3. Explain the purpose and limitation of a supply chain heat map.
4. What do severity, occurrence and detection represent in FMEA?
5. Why can nominal dual sourcing fail to provide real redundancy?

Long Answer Questions

1. Explain how geopolitical, trade and climate risks can interact in a global supply network.
2. Compare heat maps, FMEA, stress testing and scenario analysis as risk-management tools.
3. Discuss how continuity, flexibility and visibility contribute to resilience.
4. Critically evaluate the use of RPN as a basis for investment prioritisation.
5. Explain how the Triple-A model can guide strategic supply chain redesign.

Analytical / Application Questions

1. A critical component has 9,600 usable units and average consumption of 640 units per day. Calculate time to survive, state the assumptions, and recommend three responses to a 20-day supply interruption.
2. Construct a risk register and heat-map assessment for a company dependent on one overseas supplier, one port and one cloud-based logistics platform. Identify common-cause dependencies.
3. Design a stress-test scenario involving a cyberattack, a climate event and a trade restriction. Specify performance measures, decision thresholds and recovery actions.

Multiple Choice Questions with Answers

Question 1

Which capability in the Triple-A model concerns redesigning the supply network for changed conditions?

A. Agility

B. Adaptability

C. Alignment

D. Absorption

Correct Answer: B. Adaptability

Question 2

A risk has probability rating 4 and impact rating 5. Using R = P × I, its risk score is:

A. 9

B. 15

C. 20

D. 25

Correct Answer: C. 20

Question 3

In traditional FMEA, a high detection score generally means that:

A. The failure is easy to detect

B. The failure is difficult to detect before impact

C. The failure has low severity

D. The failure occurs frequently

Correct Answer: B. The failure is difficult to detect before impact

Question 4

What is the principal purpose of a stress test?

A. To eliminate all uncertainty

B. To assess performance under a defined adverse condition

C. To calculate normal transportation cost

D. To replace business continuity planning

Correct Answer: B. To assess performance under a defined adverse condition

Question 5

A firm has 12,000 usable units and consumes 800 units per day. Under the stated simplifying assumptions, time to survive is:

A. 10 days

B. 12 days

C. 15 days

D. 18 days

Correct Answer: C. 15 days

Question 6

Which situation represents a common-cause dependency?

A. Two suppliers use different countries and different ports

B. Two qualified suppliers rely on the same sub-tier foundry

C. One supplier has two production lines

D. A firm holds inventory at two warehouses

Correct Answer: B. Two qualified suppliers rely on the same sub-tier foundry

Question 7

Which statement best describes expected loss?

A. It is always equal to the worst possible loss

B. It combines scenario probabilities and losses

C. It is valid only when all probabilities are zero

D. It measures detection difficulty in FMEA

Correct Answer: B. It combines scenario probabilities and losses

Question 8

Which action most directly improves cyber resilience?

A. Increasing product variety

B. Using multifactor authentication and tested backups

C. Reducing supplier visibility

D. Concentrating all systems on one platform

Correct Answer: B. Using multifactor authentication and tested backups

Question 9

Postponement primarily involves:

A. Completing all customisation before demand is known

B. Delaying final differentiation until better demand information is available

C. Eliminating all inventory

D. Replacing every supplier annually

Correct Answer: B. Delaying final differentiation until better demand information is available

Question 10

Which limitation applies to heat-map scores?

A. They cannot display risk priorities

B. They always provide precise statistical probabilities

C. Ordinal ratings can create false precision

D. They are useful only for financial risk

Correct Answer: C. Ordinal ratings can create false precision