A supplier accounts for a small share of spending but provides the one component without which production stops. Another supplier receives a large share of the budget for items available from several alternatives. Spend concentration and operational dependence are not the same thing.
Start with what would stop if a supplier became unavailable. The question is broader than failure: a quality problem, delayed shipment, lost system access or unexpected capacity limit can also interrupt the business.
Ask what replacement would really involve
A second name in a spreadsheet is not necessarily a usable alternative. Would the product need testing? Would staff need training? Could tooling, data or specifications be transferred? How long would approval and delivery take?
For an illustrative packaging supplier, a substitute box may look straightforward until dimensions, print artwork and packing equipment are considered. Record the steps and uncertainties instead of assuming an alternative can begin tomorrow.
Look below the first supplier
Two suppliers may depend on the same factory, software platform, transport route or raw material. Multiple contracts do not automatically create independent capacity. Ask proportionate questions about those shared dependencies, especially for activities essential to delivery.
For technology procurement, NIST’s supplier due-diligence guidance offers a structured cybersecurity perspective. Its scope is specific; a broader operational review also needs commercial, production and logistics information.
Make the review useful to a decision
Build a short record for each critical supplier: service or item, business process affected, available buffer, replacement steps, estimated lead time and responsible owner. Label unverified assumptions. A confident number based on no evidence can be more misleading than an honest unknown.
Discuss possible responses in context. These might include clarifying specifications, arranging access to essential data, testing an alternative or improving communication. Holding more stock is not automatically the right answer, especially for perishable or rapidly changing items.
Revisit the assumptions after a change
A new product, acquisition, contract or system migration can alter dependence. Set a review trigger as well as a calendar date. Ask whether the business could still carry out its plan under the conditions it now faces.
The outcome should be a small set of named actions and owners. “Diversify suppliers” is too vague to test. “Confirm whether the alternative can meet this specification and document the approval time” creates a practical next step without pretending uncertainty has disappeared.