Risk Management and Sustainability
Risk Management and Sustainability tests whether you can identify, assess, mitigate, and monitor supply risk while embedding environmental, social, and governance requirements into sourcing. Expect questions on risk registers, likelihood and impact, business continuity, supplier due diligence, carbon scopes, modern slavery, and circularity.
Core rules and concepts
- Risk management is a cycle: identify, assess likelihood and impact, prioritise, treat, monitor, and review. A risk register is a tool, not the process.
- Supply risks include financial failure, quality failure, single-source dependency, geopolitical disruption, cyber, ethical breach, and climate exposure. Mitigation includes dual sourcing, buffer stock, contractual remedies, contingency planning, and supplier development.
- Business continuity planning identifies critical suppliers and recovery time objectives. It should be tested, not filed.
- Sustainability covers environmental, social, and governance factors. Carbon accounting commonly uses Scope 1 direct emissions, Scope 2 purchased energy, and Scope 3 value-chain emissions. Scope 3 often dominates procurement’s footprint.
- Due diligence should be risk-based: human rights, modern slavery, labour standards, environmental permits, and anti-corruption. Codes of conduct need monitoring and remedy.
Worked example
A critical component is single-sourced from a supplier in a flood-exposed region. The risk register scores likelihood as medium and impact as high because a stoppage would halt production within five days. Mitigation includes qualifying a second source, holding 20 days of buffer stock, requiring a tested continuity plan, and monitoring flood alerts. Reasoning: the score justifies action, but buffer stock alone is not resilience; a qualified alternative and supplier recovery capability reduce both likelihood and impact.
Traps that cost marks
Equating a risk register with risk management ignores treatment and monitoring. Assuming sustainability is only environmental misses labour and governance issues. Excluding Scope 3 understates procurement’s carbon exposure. Accepting a supplier code without audit or remedy is greenwash. Treating all suppliers with the same due-diligence depth wastes effort and misses critical risk.
Exam technique
Score risk using evidence, state mitigation and residual risk, and assign ownership and review. For sustainability, link the requirement to due diligence, contract terms, monitoring, and remedy.