Supply Chain Relationships and Risk Management
Domain 4 tests how supply chain relationships are segmented, governed, and measured, and how risk is identified, assessed, and treated. Expect questions on supplier collaboration, scorecards, risk matrices, resilience, and business continuity.
Relationship management
Relationships range from transactional to strategic alliances. Kraljic’s matrix segments purchases by profit impact and supply risk: noncritical (simplify), leverage (compete), bottleneck (secure supply), strategic (partner). Relationship intensity should follow value and risk, not history. Strategic suppliers need executive sponsors, joint roadmaps, open-book costing, and joint innovation. Leverage suppliers suit competitive bidding and volume consolidation; bottleneck suppliers need qualified alternatives, longer contracts, and buffers; transactional suppliers suit catalogs and low-touch procurement. SRM uses governance, joint business plans, scorecards, and supplier development. Scorecards typically cover quality, delivery, cost, responsiveness, innovation, and sustainability, reviewed in structured business reviews rather than only at renewal. Collaboration models include CPFR, VMI, consignment, and early supplier involvement.
Risk management
Use a repeatable process: identify, assess likelihood and impact, prioritize, respond, monitor. Assess inherent risk first, then residual risk after controls. A register should name an owner, trigger, response, and review date. Responses include avoid, mitigate, transfer, accept, and exploit upside. Resilience comes from redundancy, multi-sourcing, flexibility, visibility, buffers, and tested business continuity plans. Risk categories include supply, demand, operational, financial, geopolitical, cyber, compliance, and reputational. FMEA scores severity × occurrence × detection.
Worked example: Risk A has 20% annual probability and $500,000 impact: expected loss $100,000. A $40,000 mitigation cuts probability to 5%, expected loss $25,000, so expected benefit is $75,000 – $40,000 = $35,000. Risk B has 5% probability and $2,000,000 impact: expected loss $100,000. A $120,000 mitigation cuts probability to 1%, expected loss $20,000, benefit $80,000 – $120,000 = –$40,000. Prioritize A on expected value, but check risk tolerance: B’s tail could be catastrophic, so mitigation or transfer may still be justified, and a low-probability event may deserve action even when expected value is negative.
Traps: treating every supplier as strategic; confusing risk transfer with risk elimination; keeping a static risk register; ignoring Tier 2 suppliers; assuming insurance covers reputational or compliance loss; using expected value alone for low-probability, high-impact events.