26 July 2024
Topics in this article
  • Risk & Resilience

Recent disruptions have put a spotlight on risk for many organizations. How can you best address it? 

In 2023, leading industry research showed that more than 70% of CPOs indicated supply chain-related disruptions have increased from an already elevated baseline from the year prior. Inflation, supply shortages, and ESG were cited as major areas of concern. While organizations have been dealing with risk for decades, the recent turbulence has put it firmly at the forefront for many C-suite decision-makers. 

As today’s organizations weigh the benefits and trade-offs of risk, they are likewise seeking greater resilience, which, by definition, means understanding the inherent trade-offs with risk. The most recent edition of the PWC CEO survey highlights a marked increase in CEOs eyeing more transformative change, reinventing and rewiring in response to concerns about the long-term viability of current business models. Building resilience is cited as a key driver by 39%, with growth strategy leading at 78%. (Maybe pop out/highlight this last sentence) Arguably, however, the two interlink; supply chain resilience will be a pivotal enabler of a successful growth strategy. 

Unsurprisingly, technology is changing the game for how organizations can address risk. Our latest CPO Briefing, which can be downloaded here, looks at the broad impacts and also breaks down how and where this is happening. There may not be one single, holistic solution available to everyone, but there is a broad landscape of technology being used to enable different distinct parts of supplier and supply chain risk programs. 


So how exactly does technology enable risk management? 


Typically, it allows us to collect and process data, automate tasks and processes, and quite simply operate at a scale and complexity that is impractical for humans and spreadsheets to match.

When it comes to risk management programs, in simple terms businesses most often want to make basic checks on a broad number of suppliers and undertake incrementally more risk activities with a diminishing number of more strategic, and or ‘risky’ suppliers.

They want greater transparency and visibility of supply chains for key products and services where disruption may cause significant financial or reputational risk (for example). This is an approach that balances what you do, with the practicalities of operating at scale and the cost of doing so. 

10 Pillars for Identifying RisK

To start with, and to lay the foundations for a successful risk program, you must undertake three key activities: 

1) identify the risks that your business may be facing; 
2) establish your organizational risk appetite and how it wishes to balance these risks with reward; and 
3) segment your suppliers based on their risk profile to identify appropriate action

Our report views risk through 10 primary pillars:

Not all the risks above will be relevant to your business, and those that are may vary in relevance over time in any particular supplier relationship or supply chain. To uncover this, understand the types of data, information, and activities that will be associated with the in-life management of your suppliers or supply chain. 

LEVEL ONE: RISK ASSURANCE

Risk Assurance is the base level and consists of broad compliance checks on many suppliers, such as financial due diligence or cybersecurity standards. These are the sorts of checks that can often frustrate and add time to the onboarding of new suppliers, and at times, can take several weeks. Solutions that seek to automate parts of the assurance process are well-positioned.

LEVEL TWO: RISK MANAGEMENT

At this level, many specialist and niche external tools are available to monitor risks at a general supply or category level. Perhaps you operate in a regulated environment, and information and security risks need focused management; maybe you’re concerned about the financial viability of key suppliers on your construction project; or you’ve made social commitments that hold a reputational risk if overlooked. Tools exist to manage beyond simple compliance and zoom in on performance, reporting, SLAs, and KPIs.

LEVEL THREE: RISK AGILITY

The goal in supply chain risk management is to achieve end-to-end transparency from origin through to delivery in your organization. Using that data to spot risks enables you to be agile and informed and take action to mitigate risks to avoid disruption and costs. Real-time information about suppliers, manufacturing, logistics, and inventory is invaluable in this process. visibility of risk is key to adhering to your organizational risk appetite and driving aligned decision-making. Tuning into this balance will be critical to achieving risk agility.

MAKING THE CASE FOR RISK TRANSFORMATION

Risk is a business transformation initiative, so treat it as such by building a thorough case for change, including operational and financial benefits, executive support and investment requirements, and the potential paths forward.

With organizations facing such a turbulent and uncertain time, risk management becomes a critical tool for success. Over 70% of Chief Procurement Officers (CPOs) reported increased procurement and supply chain-related risks in the past year, driven by inflation, supply shortages, and ESG concerns. What is right for you will be what addresses your most prominent risks, to the extent your risk appetite dictates, and your budget affords. Be it Risk Assurance, Risk Management, or Risk Agility. The evolving nature of risk reflects the need for continuous adaptation. Some risks cannot be predicted, highlighting further the importance of establishing the frameworks and processes that enable agility and resilience as key enablers in future business models.


Download the full report today, or get in touch to learn how we can help you build and execute a successful procurement and supply chain risk strategy for your business:

related posts

Let’s talk.

If you are looking to drive purposeful and profitable change, get in touch.

Contact us