Supply Chain · Source
Supplier Risk Scorecard
Score key suppliers on financial health, geography, capacity, single-point dependency and quality history.
- Time45 min
- FormatSolo
- StageSource
Supplier Risk Scorecard: what it is and why it works
A supplier risk scorecard rates the suppliers of your most critical inputs on a handful of risk dimensions so that exposure becomes visible and comparable. The card uses five: financial health, geography (natural hazards, political and logistics exposure), capacity and its utilization, single-source dependency, and quality history. Each supplier gets a simple score on each axis, often 1 to 5 with written criteria, and any supplier scoring high on two or more axes is flagged. Flagged suppliers get defined monitoring indicators and a trigger date by which action, such as buffer stock or a second source, must start if the risk has not fallen.
The scorecard works because supply risk is usually known in pieces by different people but rarely assembled. Buyers know which suppliers are single sources, quality engineers know who has had escapes, and finance may notice payment term requests. Scoring on common criteria turns scattered knowledge into a ranked list, and the two-axis flag focuses effort where risks combine, since combined risks turn a disruption into a stoppage. Starting from inputs that would stop production within a week keeps the scope practical. The scorecard feeds the risk axis of the Kraljic matrix, provides the geographic layer of a supply risk map, and identifies candidates for dual sourcing.
What you need
- A list of purchased inputs whose absence would stop production within about a week
- The supplier and manufacturing site for each input, including sub-tier sources where known
- Available financial indicators: credit reports, payment behavior, public filings
- Quality and delivery performance history for the last twelve months
- Written scoring criteria for each risk dimension
What you get
- A scored list of critical suppliers across the five dimensions
- Flagged suppliers with high scores on two or more dimensions
- Monitoring indicators and a trigger date for each flagged supplier
- A monthly review routine with a named owner
When to use it
When a single supplier failure would stop your line and you do not know which one.
How to do it, step by step
- List the inputs that would stop production within a week.
- Score each supplier: financial health, geography, capacity, single-source, quality history.
- Flag any supplier scoring high on two axes.
- For flagged suppliers, define monitoring and a trigger date for action.
- Review the scorecard monthly; risk ages fast.
Worked example: Risk scoring for a brake component plant
Illustrative scenario — figures are realistic but not from a real company.
A tier-two automotive supplier making brake caliper assemblies had suffered a two-day line stoppage when a small plating subcontractor closed without warning. Management asked for a list of which other suppliers could cause the same outcome.
- The materials team listed 31 purchased inputs with less than a week of stock coverage whose loss would stop assembly, from castings to seals and plating services.
- Each supplier was scored 1 to 5 on the five dimensions with buyers and supplier quality engineers. A rubber seal maker was single source with a plant in a flood-prone region; a machining subcontractor ran near full capacity and had recently asked for shorter payment terms.
- Six suppliers scored 4 or higher on at least two dimensions and were flagged.
- For each flagged supplier the team defined indicators, such as on-time delivery, payment requests and capacity bookings, and a trigger date. The seal maker received a 60-day date to either qualify an alternate compound source or add buffer stock.
Result. Within one quarter, two flagged suppliers had a qualified alternative and three had agreed buffer stock. When the machining subcontractor later reduced shifts, the plant already had parts on hand and a second source in trial. The team learned that financial warning signs often appeared first in payment behavior rather than in formal reports.
Common pitfalls and how to avoid them
- Scoring every supplier in the database, which dilutes attention and delays results.Start with inputs that would stop production within a week and extend coverage later.
- Using scores without written criteria, so each buyer rates differently.Define what 1, 3 and 5 mean for each dimension and calibrate a few suppliers together.
- Flagging risks without deciding what happens next.Assign monitoring indicators, an owner and a trigger date for action to every flagged supplier.
- Looking only at the direct supplier and ignoring its critical sub-tier sources.Ask critical suppliers where key materials and processes come from and score the most important sub-tiers.
Frequently asked questions
How do you assess supplier risk?
Identify the suppliers of inputs that would stop your operation, then rate each on a consistent set of dimensions such as financial stability, geographic and political exposure, capacity, dependency on a single source, and quality and delivery history. Use written criteria, combine internal data with external sources such as credit reports, and focus action on suppliers with high scores on several dimensions at once.
What should be in a supplier risk scorecard?
At minimum: the supplier and site, the inputs they provide, scores on each risk dimension, the combined flag, monitoring indicators, an owner and a trigger date for action. Many teams add sub-tier dependencies, stock coverage and the time needed to qualify an alternative source, which together show how long you could survive a disruption.
How often should supplier risk be reviewed?
Review critical suppliers at least monthly, since financial health, capacity and geopolitical conditions can change quickly. A full rescoring of the whole list can be quarterly or semiannual. Events such as late payments, quality escapes, natural disasters or ownership changes should trigger an immediate review of the affected supplier.
Origin
Supply risk management practice — post-2011 disruptions mainstreaming.
Used in these playbooks
Resilience audit 2 days
Two days to know your real exposure: risk map, supplier scores, stress scenarios, buffers and backup plans on paper.
- Supply Risk Map
- Supplier Risk Scorecard
- Stress Scenarios
- Strategic Buffers
- Backup Supply Plans
Related methods
- Kraljic MatrixSegment suppliers by impact on profit and supply risk: routine, leverage, bottleneck, critical — and manage…
- Supply Risk MapPlace suppliers on a map with tier, geography, dependency and recovery time; the red cluster is your exposure.
- Dual SourcingQualify a second source for anything that stops production, and split volumes to keep both suppliers honest.
More in “Source”
Secure the inputs: suppliers, contracts and total cost.