Blog · Procurement and supply chain · Procurement
Supplier risk analytics combines observed service deterioration with purchasing exposure and dependency. Work through a supplier review queue, reconcile its inputs, and separate warning signals from unsupported predictions about failure.
Supplier risk analytics prioritizes suppliers for review by combining observed service deterioration with purchasing exposure and operational dependency. It helps a procurement team decide where to investigate first, using evidence it can trace to orders, receipts, and approved sourcing records.
A falling delivery rate is a signal to review. It is not proof that a supplier is failing financially, and a large spend share is not a probability of disruption.
Use three distinct questions. Has service worsened against a comparable baseline? How much business is currently exposed? What would make the supplier difficult to replace?
Receipt and order records answer the first question. Invoice and open-order records help answer the second. Approved-source lists, item-site sourcing assignments, and operational judgment support the third. Keeping these questions separate prevents an arbitrary combined score from sounding more certain than the evidence.
For performance evidence, FAR 42.1503 provides a useful federal example: evaluations should reflect objective facts supported by contract performance data. This article uses that evidence principle for a commercial review, rather than suggesting federal contractor ratings apply to every business.
The supplier deterioration worked example covers the baseline calculations in detail. Here, those calculations feed a review queue together with the company's exposure and sourcing constraints.
An Ohio industrial manufacturer reviews suppliers serving one site in the same purchasing category. It compares August and September 2026 delivery commitments, uses September net purchases for the spend view, and takes an open-order snapshot at September 30, 2026.
| Evidence | Row grain | Required fields | Control |
|---|---|---|---|
| Due-order schedule | Schedule line | Supplier, site, item, quantity due, commitment date | Include undelivered lines due in the period |
| Receipts | Receipt transaction | Schedule-line ID, quantity, receipt date | Aggregate split receipts before classifying service |
| Posted purchases | Invoice line | Supplier, category, net amount, currency | Include credits under the same scope |
| Open orders | Outstanding order line | Supplier, remaining quantity, price, snapshot date | Value only the unreceived balance |
| Approved sources | Item and site | Approved supplier, alternative status, review date | Confirm alternatives are usable now |
Keep the due-date cohort stable: September service covers September commitments, even when a late delivery arrives in October. Use the original commitment or a clearly disclosed approved-change policy. Do not switch between those approaches when a result becomes uncomfortable.
Open orders and posted purchases describe different exposures. An outstanding commitment has not necessarily become a posted purchase. Do not add the two values and call the sum a loss estimate.
The example uses due schedule lines received on time and in full, or OTIF. A line fails if it misses either condition. All rates below are calculated from the counts and displayed to one decimal place.
| Supplier | Baseline due lines | Baseline OTIF lines | Current due lines | Current OTIF lines | Baseline OTIF | Current OTIF | Deterioration, percentage points |
|---|---|---|---|---|---|---|---|
| Lake Components | 100 | 96 | 100 | 88 | 96.0% | 88.0% | 8.0 |
| Pine Industrial | 100 | 95 | 100 | 93 | 95.0% | 93.0% | 2.0 |
| Mesa Packaging | 100 | 98 | 100 | 97 | 98.0% | 97.0% | 1.0 |
| Total | 300 | 289 | 300 | 278 | 96.3% | 92.7% | 3.7 |
OTIF = On-time-in-full lines / Due lines
Deterioration in percentage points = Baseline OTIF percentage − Current OTIF percentage
Lake's deterioration is (96 / 100 − 88 / 100) × 100 = 8.0 percentage points. The total uses (289 / 300 − 278 / 300) × 100 = 3.7 points after rounding. Calculate from unrounded rates; subtracting the displayed 96.3% and 92.7% would introduce a rounding difference.
The company total can establish that service weakened, but it cannot tell the reviewer which items are critical. That requires the dependency evidence alongside it.
All suppliers in this example belong to the same category and site. The total category spend denominator is therefore shared. Open-order shares use the separate snapshot total.
| Supplier | September net purchases (USD) | Share of category purchases | Open-order value (USD) | Share of open orders | Dependency evidence |
|---|---|---|---|---|---|
| Lake Components | 120,000 | 40.0% | 60,000 | 30.0% | Critical part; no approved alternative |
| Pine Industrial | 150,000 | 50.0% | 40,000 | 20.0% | Approved alternate available; capacity needs confirmation |
| Mesa Packaging | 30,000 | 10.0% | 100,000 | 50.0% | Standard packaging; alternative capacity confirmed |
| Total | 300,000 | 100.0% | 200,000 | 100.0% |
Lake's purchase share is $120,000 / $300,000 = 40.0%, and its open-order share is $60,000 / $200,000 = 30.0%. Each other share follows the same denominator within its column. The values reconcile to $300,000 of posted category purchases and $200,000 of outstanding commitments.
Mesa has the largest open-order value but a confirmed alternative. Lake combines the sharpest deterioration with a critical part and no approved replacement. That makes Lake the first supplier to investigate under this team's stated review approach, even though Pine has the largest recent spend.
For the broader sourcing picture, use single-source parts and inbound concentration by site. A category spend share alone does not establish whether a particular part has an alternative.
Write a reason for each priority rather than disguising judgment inside a precise-looking risk percentage.
| Review order | Supplier | Why review it here? | Owner's next evidence request |
|---|---|---|---|
| First | Lake Components | Largest service decline and critical dependency | Validate affected orders, obtain recovery commitments, assess qualification options |
| Next | Pine Industrial | Largest recent spend and some deterioration | Confirm alternate capacity and examine late-line causes |
| Monitor | Mesa Packaging | Small decline, high open commitments, usable alternative | Verify current commitments and maintain backup readiness |
The category manager coordinates the review. Operations validates consequences for production; quality owns qualification evidence; the buyer validates commitments. Record who can approve an alternate and what must happen before switching orders.
Purchasing files also leave important risks unobserved. NIST's supply-chain guidance describes cybersecurity supply-chain risks across technology product and service life cycles. A delivery table cannot answer those questions; route relevant concerns to the people responsible for that evidence.
Use supplier management analytics to track agreed actions through recurring reviews. Use supply chain risk analytics when the question concerns shared locations, routes, or upstream dependencies across suppliers rather than an individual relationship.
Bring a sample of your own due-order, receipt, purchasing, open-order, and approved-source files: Covirage maps the columns, its tools compute and check the comparisons, and the external AI model explains the results with every figure traced to its rows. Create a free Covirage account, which takes about a minute, then set up your business and bring the evidence behind your next supplier review.
See Covirage for procurement teams for the purchasing context.
Purchasing data can reveal deteriorating service and the company's exposure to that supplier. It cannot establish insolvency, financial health, or the cause of a disruption by itself. Treat the findings as prompts for evidence gathering and an accountable review.
No. Large purchasing exposure can increase the consequence of a disruption, but a smaller supplier may provide an irreplaceable component. Review observed performance, approved alternatives, critical uses, and recovery constraints together rather than ranking suppliers on spend alone.
Supplier risk reviews focus on evidence about an individual supplier and the company's dependency on it. Supply chain risk also examines shared locations, transport routes, upstream dependencies, and other connections that can disrupt several suppliers at once.