11. Uncertainty, Simulation, Risk and Resilience

Introduction and Context

Supply chains are designed to coordinate flows of materials, information, money and capacity across organizations. Yet the decisions supporting these flows are made under uncertainty. Demand may differ from forecasts, transport times may vary, suppliers may fail, ports may close, cyberattacks may interrupt systems, and regulatory or geopolitical events may alter the operating environment. A plan that appears optimal under average conditions can therefore perform poorly when exposed to disruption.

Supply chain analytics provides methods for representing and managing this uncertainty. Monte Carlo simulation estimates the range of outcomes that may result from uncertain inputs. Discrete-event simulation represents the movement of entities through processes, queues and resources over time. Scenario planning explores alternative futures, while stress testing examines performance under severe but plausible conditions. Risk mapping helps managers identify, prioritize and communicate vulnerabilities. Resilience analysis extends this work by examining how quickly and effectively a supply chain can absorb, adapt to and recover from disruption.

The purpose of these methods is not to predict the future with certainty. Rather, they improve decisions by revealing exposure, trade-offs and conditions under which a strategy may fail. A resilient supply chain is not necessarily the one with the lowest cost in normal circumstances. It is one whose design provides an acceptable balance among efficiency, service, risk exposure, recovery capability and long-term adaptability.

Learning Objectives

After studying this chapter, students should be able to:

1. Explain uncertainty, risk, disruption, vulnerability, resilience and robustness in supply chains.

2. Distinguish Monte Carlo simulation from discrete-event simulation and identify suitable applications for each.

3. Construct scenarios, risk maps and stress tests for logistics decisions.

4. Calculate and interpret resilience measures such as time-to-recover and time-to-survive.

5. Evaluate mitigation and resilience investments using cost, service and risk criteria.

6. Apply simulation and risk analysis to managerial decisions under uncertainty.

7. Recognize the limitations, ethical requirements and governance implications of data-driven risk analysis.

From Variability to Vulnerability

Uncertainty exists when the decision maker does not know which future condition will occur. In supply chains, uncertainty may concern demand, lead time, yield, capacity, exchange rates, fuel prices, weather or the probability of disruption. Variability is the observable fluctuation of a process, whereas uncertainty refers to incomplete knowledge about that process or its future state.

Risk combines the possibility of an adverse event with its consequences. A useful conceptual representation is:

Risk exposure = probability of event × consequence of event

This expression is not always a complete quantitative model. Rare events may have poorly estimated probabilities, and consequences may include financial, operational, safety, environmental and reputational dimensions. Nevertheless, it encourages managers to consider both likelihood and impact rather than focusing only on the frequency of incidents.

A hazard is a source of potential harm, such as flooding, supplier insolvency or malware. A disruption is an event that interrupts normal supply chain operations. Vulnerability is the degree to which a network is susceptible to disruption. Exposure concerns the extent to which assets, flows or facilities are located in the path of a hazard. Resilience is the capability to resist, absorb, adapt to and recover from disruption while maintaining critical functions.

Robustness and resilience are related but distinct. A robust plan performs acceptably across a range of conditions without requiring major adjustment. A resilient system may experience substantial degradation but recover rapidly. Flexibility, redundancy, visibility, collaboration and recovery capacity can all contribute to resilience, although each involves cost and design trade-offs.

A useful distinction is between aleatory and epistemic uncertainty. Aleatory uncertainty arises from inherent randomness, such as daily demand variation. Epistemic uncertainty arises from incomplete knowledge, such as uncertainty about the reliability of a new supplier. Simulation can represent both, but they should not be treated identically. More data may reduce epistemic uncertainty, whereas additional data cannot eliminate inherent randomness.

A Decision Architecture for Uncertain Supply Chains

A rigorous analysis normally proceeds through several connected stages. First, the decision problem and performance objectives must be defined. The question may concern inventory positioning, facility location, supplier allocation, transport mode, emergency stock or continuity investment. Objectives should be expressed through measurable indicators such as total cost, fill rate, expected shortage, maximum recovery time, carbon emissions or probability of violating a service requirement.

Second, the system boundary is established. A narrow analysis may examine one warehouse, while a strategic study may include suppliers, ports, plants, distribution centers, customers and information systems. A boundary that is too narrow can hide dependencies; one that is too broad may make the model difficult to validate and interpret.

Third, uncertain inputs and disruption mechanisms are identified. Historical data, supplier records, engineering assessments, expert judgment and external data may be combined. The analyst then chooses probability distributions, dependency structures and scenario assumptions. Finally, alternative policies are simulated, assessed against performance measures and reviewed by decision makers.

This sequence matters because simulation does not compensate for a poorly defined decision problem. A highly sophisticated model can produce misleading results if it excludes a critical supplier dependency, assumes independence where strong correlation exists, or optimizes a metric that does not represent managerial priorities.

Monte Carlo Simulation: Propagating Uncertainty Through a Model

Monte Carlo simulation repeatedly samples uncertain inputs and calculates the resulting outcomes. Suppose total replenishment time is the sum of supplier lead time, transport time, customs processing and receiving time. Each component can be represented by a probability distribution rather than a single average. A simulation trial samples one value for each component and computes total lead time. Thousands of trials produce an empirical distribution of total lead time.

The basic procedure is as follows:

1. Define the model and output measures.

2. Identify uncertain inputs.

3. Assign distributions or empirical samples to those inputs.

4. Represent correlations and dependencies.

5. Generate repeated random trials.

6. Summarize the output distribution.

7. Test sensitivity and validate the model.

Important outputs include the mean, median, standard deviation, percentiles, probability of exceeding a threshold and tail loss. A 95th-percentile lead time, for example, indicates a value that is exceeded in approximately 5 percent of simulated trials, subject to the model assumptions. Percentiles are often more useful than averages for service and safety-stock decisions because customers experience individual outcomes rather than averages.

A simple inventory application illustrates the logic. If daily demand is uncertain and replenishment lead time varies, the demand during lead time is also uncertain. Simulation can estimate the probability of stockout for a proposed reorder point. The manager can then compare the cost of additional inventory with the reduction in shortage risk. If demand and lead time are positively correlated, using independent distributions will understate the upper tail of demand during lead time and may produce insufficient safety stock.

Monte Carlo analysis is especially appropriate when the model is primarily algebraic or spreadsheet-based and the key issue is uncertainty in inputs. It is less suitable when performance depends heavily on the detailed sequence of events, queues, resource conflicts or operational rules.

Discrete-Event Simulation: Representing Operations Through Time

Discrete-event simulation models a system as a sequence of events occurring at particular points in time. Examples include an order arrival, a picking operation, a truck departure, a machine failure, a customs inspection or the completion of unloading. The state of the system changes when an event occurs.

A distribution center model might represent order arrivals, picking resources, packing stations, dock doors and vehicle departures. Orders wait in queues, resources become occupied, and processing times vary. The model can test alternative staffing levels, appointment rules, batch sizes, warehouse layouts or operating schedules. Unlike a simple spreadsheet, it captures interactions among capacity, timing and congestion.

The major elements of a discrete-event model are entities, resources, activities, queues, events and decision rules. Entities may be orders, pallets, vehicles or containers. Resources include workers, forklifts, docks and production lines. Activities consume time and often require resources. Queues arise when demand for a resource exceeds its immediate availability.

A simulation should distinguish the warm-up period from the steady-state period when appropriate. Initial conditions may create an artificial empty system and bias results. Multiple replications using different random seeds are generally required to estimate output variability. Results should be reported with confidence intervals rather than as a single apparently precise number.

Monte Carlo and discrete-event simulation can be combined. For example, a discrete-event model may represent warehouse operations, while Monte Carlo sampling supplies daily demand, supplier reliability and transport disruptions. The distinction concerns the primary modeling logic: Monte Carlo emphasizes repeated uncertainty propagation, whereas discrete-event simulation emphasizes event-driven system dynamics.

Scenario Planning and Stress Testing

Probability-based simulation is not sufficient for every disruption. Some events are too rare for reliable probability estimates, while others involve structural changes that historical data cannot represent. Scenario planning addresses this problem by constructing coherent descriptions of possible future conditions.

A scenario is not simply a forecast. It is a logically consistent combination of assumptions about external drivers, such as geopolitical restrictions, climate conditions, labor availability, technology adoption, customer demand or infrastructure access. Scenarios may include a baseline, moderate disruption, severe disruption and transformational change. Their value lies in challenging assumptions and encouraging preparation for different operating environments.

Stress testing applies demanding conditions to evaluate whether a network, policy or organization remains within acceptable limits. A stress test may combine a supplier shutdown, a port closure and a demand surge. The event need not be the most extreme imaginable; it should be severe enough to expose weaknesses yet plausible enough to support managerial action.

Good stress tests examine both direct and cascading effects. A factory closure may create an immediate supply shortage, but it may also increase demand for alternative suppliers, congest an substitute ports, raise transport prices and overload customer-service systems. Network dependencies and common suppliers are therefore important. Testing individual risks separately can underestimate the effect of simultaneous or correlated disruptions.

Scenario planning is exploratory, whereas stress testing is evaluative. Scenario planning asks, “What different futures should management consider?” Stress testing asks, “How does the proposed system perform under a demanding condition?” Together they support robust strategy design.

Risk Mapping and Network Exposure

Risk mapping converts complex risk information into a visual and analytical form. The familiar probability-impact matrix classifies risks according to likelihood and consequence. Its simplicity supports communication, but qualitative ratings can conceal uncertainty and produce inconsistent judgments. A more advanced risk map may include financial exposure, time-to-recover, detectability, geographic concentration, substitutability and confidence in the underlying data.

Supply chain risk should also be mapped spatially and structurally. A geographic map may reveal concentration of suppliers near a flood-prone port. A network map may reveal that several apparently independent products rely on the same sub-tier supplier. A bill-of-materials analysis can identify components whose unavailability would halt production even if their purchase value is small.

Centrality measures from network analysis can help identify highly connected facilities or nodes through which many flows pass. However, centrality alone does not establish criticality. A highly connected node may have easy substitutes, while a low-volume specialized supplier may be impossible to replace. Network analysis should therefore be combined with operational simulation and expert validation.

Risk registers should record the risk statement, causes, affected processes, indicators, current controls, owner, mitigation actions, residual exposure and review date. Risk mapping becomes valuable only when it leads to decisions, accountability and monitoring.

Measuring Resilience and Recovery

Resilience requires measures that describe performance before, during and after disruption. Common measures include service level, throughput, unmet demand, revenue loss, inventory depletion, cost increase and recovery duration.

Time-to-survive (TTS) is the length of time a supply chain can continue to meet a defined service requirement after a disruption, given available inventory, capacity and alternatives. Time-to-recover (TTR) is the time required to restore the affected capability to an acceptable operating level. If TTR exceeds TTS, a service failure is likely unless mitigation or substitution is introduced.

For example, a distribution center may have enough inventory to cover four days of demand after a supplier interruption, giving it a TTS of four days. If the supplier can be restored in seven days, the three-day gap must be addressed through alternate sourcing, inventory, allocation or demand management.

Resilience can also be represented through a performance curve. Let normal performance be 100 percent. A disruption may reduce performance to 60 percent, followed by gradual recovery. Measures can include the minimum performance level, time to minimum performance, recovery time and cumulative performance loss, sometimes called the resilience triangle or performance-loss area.

These measures require explicit thresholds. “Recovery” may mean restoration to 90 percent of normal throughput, full service restoration, or elimination of emergency operating procedures. Without a defined target, TTR is ambiguous and comparisons across facilities become unreliable.

Resilience Investments and Robust Decisions

Resilience investments include safety stock, dual sourcing, alternative transport routes, spare capacity, modular product design, supplier development, cyber controls, emergency contracts, visibility systems and documented continuity procedures. Their value should not be judged solely by average operating cost.

A basic economic evaluation compares the cost of an investment with avoided disruption loss. Expected loss reduction can be estimated as:

Expected benefit = baseline expected disruption loss − residual expected disruption loss

A more complete analysis includes implementation cost, operating cost, residual risk, service improvement, recovery speed and strategic value. For rare but severe risks, expected monetary value may conceal important tail exposure. A manager may rationally choose a more expensive option because it limits the probability of catastrophic service failure.

Robust optimization seeks decisions that perform acceptably across a range of parameter values or scenarios. Instead of optimizing only the expected case, it may minimize worst-case cost, limit maximum regret, or impose service constraints under selected scenarios. The choice depends on managerial risk tolerance. A pharmaceutical supply chain, emergency-service network or critical infrastructure operator may place greater weight on worst-case performance than a commodity supply chain with many substitutes.

There is no universally optimal level of redundancy. Redundancy can improve resilience but create excess inventory, idle capacity, complexity and coordination cost. Flexibility may provide similar protection with less fixed cost, but it may depend on supplier qualification, employee skills or rapid information sharing. Resilience design is therefore a portfolio decision rather than a single-variable optimization.

An Applied Illustrative Case: Northstar Medical Devices

Background

Northstar Medical Devices is an illustrative manufacturer of infusion-system components. Its final assembly plant serves hospitals through regional distributors. A specialized polymer housing is purchased from one qualified supplier located overseas. The component is low in unit cost but essential: without it, final assembly cannot proceed.

Situation and Problem

Historical data show variable demand, ocean transit times and customs clearance. Management is considering three options: retain the current single-source arrangement, qualify a second supplier in another region, or hold additional inventory. A recent port closure has raised concern that the current design may not meet the organization’s continuity target of maintaining at least 90 percent of normal customer service during a 30-day disruption.

Analysis

The analytics team defines demand, supplier lead time, transport time and recovery time as uncertain inputs. It uses Monte Carlo simulation to estimate stockout probability under different inventory levels. It also develops a discrete-event model of final assembly because shortages interact with production batches, changeovers and distributor allocation rules.

The team then constructs three scenarios: a routine transport delay, a regional port closure and a combined disruption involving supplier recovery delay and demand increase. The network risk map identifies the polymer housing as a high-criticality component because it has low substitutability and a long qualification cycle. Supplier spend is not used as the only indicator of importance.

The analysis shows that additional inventory improves TTS but does not eliminate exposure to a prolonged disruption. Dual sourcing reduces TTR and improves recovery, although the alternate supplier has a higher unit cost and initially lower process yield. Stress testing also reveals that simply adding a second supplier is insufficient if both suppliers depend on the same upstream resin producer.

Approach and Strategy

Northstar adopts a layered strategy. It qualifies the second supplier, maintains a targeted emergency inventory for the qualification period, negotiates priority transport capacity, and maps the sub-tier resin dependency. A supplier-development program is introduced to improve yield at the alternate source. The continuity plan establishes allocation rules that prioritize critical hospital orders during shortage conditions.

The decision is evaluated using total cost, probability of service falling below 90 percent, TTS, expected recovery time and performance in the severe scenario. Management accepts a moderate increase in normal operating cost because the revised design reduces dependence on a single recovery path.

Outcome

The illustrative analysis does not claim that disruption is eliminated. Instead, exposure is reduced through a combination of inventory, substitution, visibility and recovery capability. The organization also gains earlier warning because supplier and logistics indicators are monitored jointly rather than separately.

Learning Points

The case demonstrates five principles. First, criticality is not equivalent to purchase value. Second, inventory and recovery capacity solve different problems. Third, correlated dependencies can defeat apparent diversification. Fourth, simulation supports comparison of policies rather than prediction of a single future. Fifth, resilience investments should be assessed against explicit service and recovery objectives.

Challenges, Limitations and Common Errors

The quality of simulation results depends on input quality, model structure and interpretation. Historical data may be incomplete, biased toward normal conditions or inconsistent across facilities. Rare disruptions provide few observations, so estimated probabilities can be highly uncertain. Expert judgments should be documented with confidence levels rather than presented as objective facts.

Assuming independence is a frequent error. Demand surges, transport delays and supplier failures may be linked to the same external event. Ignoring correlation can substantially understate tail risk. Another error is using averages for nonlinear systems. Average processing time may appear acceptable while queues become unstable during peaks.

Models can also suffer from excessive complexity. A model with many poorly understood parameters may be less useful than a simpler transparent model. Validation should include face validation with operational experts, comparison with historical behavior, sensitivity analysis and, where possible, back-testing against known disruptions.

A further danger is optimization of the wrong objective. Minimizing logistics cost may increase service risk, while maximizing average utilization may reduce recovery flexibility. Decision makers should examine distributions, tail outcomes, constraints and trade-offs rather than relying on one performance number.

Simulation is not a substitute for organizational preparation. Contracts, authority structures, communication protocols, supplier relationships and employee capabilities determine whether a simulated response can actually be executed. Plans must be rehearsed, updated and connected to clear escalation rules.

Governance, Ethics and Professional Responsibility

Risk analytics involves important governance questions. Data owners, model owners and decision owners should be identified. Assumptions, data sources, transformations, scenario definitions and model versions should be documented. Significant decisions should be auditable and reproducible.

Ethical concerns arise when disruption priorities affect customers, workers or communities. Allocation models may prioritize high-margin customers over vulnerable populations unless explicit principles are established. Workforce data may be used in ways that threaten privacy or create unfair surveillance. Automated supplier-risk scores may disadvantage smaller suppliers because of limited data rather than actual poor performance.

Responsible practice requires proportionality, transparency and human oversight. Sensitive decisions should not rely blindly on opaque algorithms. Analysts should communicate uncertainty honestly, distinguish evidence from judgment and identify groups that may bear disproportionate consequences. Cybersecurity and access controls are also essential because risk models may contain commercially sensitive network information.

Digital Applications and Emerging Developments

Modern supply chain control towers integrate shipment data, inventory positions, supplier signals, weather information and event feeds. These platforms can support near-real-time risk monitoring, but visibility alone does not create resilience. Alerts must be linked to thresholds, response playbooks and decision authority.

Digital twins combine data, process models and simulation to represent operational systems. They can support what-if analysis for capacity changes, facility closures and routing decisions. Machine learning can improve demand forecasting, anomaly detection and estimation of failure probabilities. However, predictive accuracy may degrade when a disruption changes the underlying relationships. This is a form of model drift and requires monitoring.

Generative AI can assist in summarizing risk reports, generating scenario narratives and querying complex operational data. It should not independently determine continuity priorities without validated data, controlled access and expert review. Increasingly, resilient organizations are combining predictive analytics with prescriptive optimization, human judgment and continuous learning from exercises and real disruptions.

Climate-related physical risk, cyber-physical dependencies, geopolitical fragmentation and supply chain financial stress are likely to receive increasing attention. The emerging emphasis is on adaptive networks that can reconfigure sourcing, production and distribution rather than merely absorb isolated shocks.

Best Practices for Managers and Analysts

A credible resilience program should:

• Begin with critical products, processes and customer commitments rather than with available software.
• Define service thresholds, TTS and TTR in operational terms.
• Combine historical data with expert knowledge and clearly label uncertainty.
• Model dependencies, correlations and sub-tier exposure.
• Use Monte Carlo simulation for uncertain inputs and discrete-event simulation for queues, timing and resource interactions.
• Complement probability-based models with scenarios and stress tests.
• Evaluate both average performance and tail outcomes.
• Compare layered strategies instead of relying on a single mitigation.
• Validate models with operational personnel and test assumptions through sensitivity analysis.
• Connect risk indicators to owners, response triggers and continuity playbooks.
• Review models after disruptions, near misses, structural changes and major data changes.

Chapter Summary

Supply chains operate under demand, capacity, lead-time and disruption uncertainty. Risk analysis must therefore examine not only expected cost but also exposure, vulnerability, service degradation and recovery capability. Monte Carlo simulation propagates uncertain inputs through a model and is useful for estimating distributions, percentiles and threshold probabilities. Discrete-event simulation represents operational events, queues, resources and timing interactions. Scenario planning explores coherent alternative futures, while stress testing evaluates performance under severe and plausible conditions.

Risk maps help identify critical nodes, dependencies and concentration, but must be connected to action. Time-to-survive measures how long service can be maintained after disruption; time-to-recover measures how long restoration takes. Comparing these measures reveals whether mitigation is required. Resilience investments should be evaluated through cost, service, residual risk, recovery speed and strategic consequences. Robust decisions often combine inventory, flexibility, redundancy, visibility, supplier development and continuity procedures.

Simulation results are only as reliable as their data, assumptions and governance. Correlation, model validation, ethical allocation, transparency, cybersecurity and human oversight are essential. The objective is not to eliminate uncertainty but to make decisions that remain acceptable across a meaningful range of possible futures.

Key Terms

Uncertainty: Lack of complete knowledge about future conditions or system behavior.

Variability: Natural fluctuation in a process or outcome over time.

Risk: The possibility of an adverse event combined with its consequences.

Hazard: A source or condition with potential to cause harm or disruption.

Disruption: An event that interrupts normal supply chain operations.

Vulnerability: The degree to which a supply chain is susceptible to disruption.

Exposure: The extent to which assets, flows or activities are subject to a hazard.

Resilience: The ability to resist, absorb, adapt to and recover from disruption.

Robustness: The ability of a decision or system to perform acceptably across varied conditions.

Monte Carlo simulation: Repeated random sampling used to estimate the distribution of model outcomes.

Discrete-event simulation: Simulation in which system state changes at distinct events over time.

Scenario planning: Exploration of coherent alternative future conditions.

Stress testing: Evaluation of performance under severe but plausible conditions.

Time-to-survive: The duration for which required service can be maintained after disruption.

Time-to-recover: The time required to restore a capability to a defined acceptable level.

Redundancy: Provision of additional capacity, suppliers or routes that can substitute for affected resources.

Correlation: A statistical or causal relationship between uncertain variables.

Risk map: A visual or analytical representation of risks according to attributes such as likelihood, impact and criticality.

Robust optimization: Decision-making that seeks acceptable performance across uncertain parameters or scenarios.

Model validation: The process of checking whether a model adequately represents the system and decision purpose.

Review Questions

Short Answer Questions

1. Distinguish between vulnerability, exposure and resilience.

2. What is the principal difference between Monte Carlo simulation and discrete-event simulation?

3. Define time-to-survive and time-to-recover.

4. Why can assuming independence between demand and lead time create poor inventory decisions?

5. What is the purpose of a stress test?

Long Answer Questions

1. Explain how a supply chain analyst can design and execute a Monte Carlo simulation for replenishment risk.

2. Discuss the role of queues, resources and events in a discrete-event simulation of a distribution center.

3. Compare scenario planning, risk mapping and stress testing as tools for disruption management.

4. Explain how resilience investments should be evaluated beyond their effect on average operating cost.

5. Discuss the governance, ethical and validation requirements for supply chain risk analytics.

Analytical / Application Questions

1. A component has four days of inventory coverage, but the estimated supplier recovery time is seven days. Identify the resilience gap and propose a layered mitigation strategy.

2. A company has diversified suppliers, but all depend on the same upstream raw-material producer. Explain why the apparent diversification may be misleading and design a suitable stress test.

3. A warehouse has acceptable average throughput but severe congestion during demand peaks. Recommend a modeling approach, performance measures and managerial interventions.

22. Multiple Choice Questions with Answers

Question 1

Which situation is most appropriate for discrete-event simulation rather than a purely algebraic Monte Carlo model?

A. Estimating the percentile of total replenishment lead time from uncertain component times

B. Representing orders waiting for picking stations and competing for dock doors

C. Calculating the probability that demand exceeds available inventory

D. Estimating expected loss from several independent insurance claims

Correct Answer: B. Representing orders waiting for picking stations and competing for dock doors

Question 2

If demand and replenishment lead time are positively correlated, assuming independence will most likely:

A. Overstate the upper-tail inventory requirement

B. Understate the risk of high demand during a long lead time

C. Eliminate the need for safety stock

D. Have no effect on stockout probability

Correct Answer: B. Understate the risk of high demand during a long lead time

Question 3

A facility can maintain required service for five days after a disruption, while restoration takes eight days. Which conclusion is most appropriate?

A. The facility has a three-day resilience gap

B. The facility has no exposure because recovery is possible

C. Time-to-survive exceeds time-to-recover

D. The disruption cannot affect customer service

Correct Answer: A. The facility has a three-day resilience gap

Question 4

What is the primary purpose of stress testing in supply chain risk management?

A. To forecast the exact date of the next disruption

B. To evaluate performance under severe but plausible conditions

C. To replace all historical data with expert opinion

D. To maximize normal-period asset utilization

Correct Answer: B. To evaluate performance under severe but plausible conditions

Question 5

Which statement best distinguishes robustness from resilience?

A. Robustness concerns acceptable performance across conditions, while resilience emphasizes response and recovery

B. Robustness is measured only financially, while resilience is measured only operationally

C. Robustness requires disruption, while resilience applies only before disruption

D. They are identical concepts with different names

Correct Answer: A. Robustness concerns acceptable performance across conditions, while resilience emphasizes response and recovery

Question 6

Why may a low-spend supplier still be classified as highly critical?

A. Low-spend suppliers always have the highest probability of failure

B. Purchase value alone determines network centrality

C. The supplier may provide a highly specialized, difficult-to-substitute component

D. Low-spend suppliers do not require risk assessment

Correct Answer: C. The supplier may provide a highly specialized, difficult-to-substitute component

Question 7

Which practice most directly improves the credibility of a simulation model?

A. Reporting only the single best-performing trial

B. Removing variables that produce inconvenient results

C. Validating assumptions with operational experts and comparing outputs with historical behavior

D. Using the most complex software available

Correct Answer: C. Validating assumptions with operational experts and comparing outputs with historical behavior

Question 8

A second supplier appears to create redundancy, but both suppliers use the same upstream resin producer. This is an example of:

A. Independent diversification

B. A hidden correlated dependency

C. Excessive time-to-survive

D. A reduction in exposure through centrality

Correct Answer: B. A hidden correlated dependency

Question 9

Which measure describes the cumulative loss of performance during disruption and recovery?

A. Performance-loss area or resilience triangle

B. Supplier purchase price variance

C. Average order quantity

D. Inventory turnover alone

Correct Answer: A. Performance-loss area or resilience triangle

Question 10

Why should risk analytics include human oversight and transparent assumptions?

A. Models are always inaccurate and therefore unusable

B. Automated outputs may embed data limitations, ethical bias or unsuitable priorities

C. Human judgment eliminates all uncertainty

D. Transparency prevents the use of scenario analysis

Correct Answer: B. Automated outputs may embed data limitations, ethical bias or unsuitable priorities