Ask supply chain leaders about the disruption that genuinely hurt, and a pattern emerges: it rarely came from a supplier they managed. It came from a company two or three tiers down that they had never heard of, a single-source resin plant, a speciality chemical works, a sub-component fab, and they learnt its name at the same moment the rest of the market did, from the news.
The tier-one reviews had all been green, because the tier-ones were fine. The exposure was structural: two apparently independent tier-one suppliers drawing on the same tier-three source, a diversification strategy that converged, invisibly, one hop beyond the map. Executive surveys through 2025 and 2026 consistently rank lack of visibility into disruption beyond tier one among the top supply chain concerns, cited by around four in ten leaders, and the concern is well-placed; that is where the concentrations live.
Why the standard programme cannot see it
The conventional supplier risk apparatus, questionnaires, financial health scores, audits, scorecards, is built per-supplier, over the suppliers you have contracts with. It answers "how healthy is this counterparty?" reliably. It cannot, even in principle, answer the questions disruptions actually pose:
- Where do my independent suppliers converge? Shared sub-suppliers, shared sites, shared logistics corridors: the concentrations that turn one local event into a portfolio event.
- What is my exposure to a place? A port, a region, a single industrial cluster, summed across every path by which its output reaches my production.
- Which of my products does this news story touch? The fire, the sanction, the insolvency at a company not in my vendor master: does any path connect it to my bill of materials, and how long is the fuse?
Each is a traversal question over a network, and the network, tier two and beyond, is exactly what the questionnaire model never captures. Sub-tier mapping used to be dismissed as infeasible; between registry data, trade and customs records, bills of materials and entity resolution, it no longer is. Incomplete maps with marked gaps are achievable at scale, and an honest map with gaps beats a confident map that stops at the contract boundary.
The concentration that breaks you is by definition the one shared by suppliers you diversified across. It is invisible from one hop away, and obvious from two.
From map to instrument
A network map is a start; the instrument is what runs on it:
- Exposure computed, continuously. For every node and corridor, the products, revenue and customers reachable through it, so "what does this place mean to us?" is a query, not a war-room exercise.
- Events matched to the graph. Insolvencies, sanctions, incidents and weather, resolved to entities and sites, then traversed: does any path lead here, at what tier, with how much buffer stock in between? Most alerts die quietly because no path exists. That silence is the product; what remains is signal.
- The fuse length calculated. A tier-three failure is not a tier-one failure today; inventory along the path defines the time available. An alert that arrives with "eleven weeks of buffer, decision needed by week four" is a decision. One without it is anxiety.
- Owners and playbooks attached. Each material exposure has a named owner and a pre-agreed response: qualified alternates, allocation priorities, buffer adjustments, so detection converts to action without convening a task force first.
The competitive arithmetic is simple. The event is public; everyone's clock starts at the same headline. The firm whose graph answers "does this touch us, where, and how long is the fuse?" in minutes buys capacity, reroutes and allocates while its competitors are still finding out whether they are affected.
You cannot monitor what you have not mapped, and the news is not a monitoring system.
The question worth taking to your next risk review is simple: if tomorrow's headline named a company two tiers beneath your biggest supplier, how long would it take you to know whether it matters? Prophesee's supplier continuity module exists to make that answer "minutes". Find out what sits beneath your tier one.