Key Takeaways
Summary
24 items · 45–90 minutes
How to Use This Checklist
Supply chain risk assessment is not a one-time event — it is an ongoing operational discipline. This checklist is designed for operations, procurement, and supply chain managers who want a structured way to surface vulnerabilities across their end-to-end supply network before those vulnerabilities become expensive crises.
Work through each category with your team, documenting findings as you go. Where a gap is identified, assign an owner and a target resolution date. For a broader framework on risk documentation methodology, see our guide on conducting a business risk assessment.
This checklist covers five domains: supplier and sourcing risk, logistics and transportation risk, inventory risk, demand planning risk, and financial exposure. Completing all sections typically takes between 45 and 90 minutes depending on the complexity of your supply network.
Risk Register (Spreadsheet or GRC Tool)
Document identified risks, likelihood ratings, impact scores, mitigation owners, and resolution timelines in one centralised location.
Supplier Scorecards
Provide structured data on supplier performance, financial health, and compliance status to inform sourcing risk ratings.
Freight Analytics or TMS Reporting
Extract on-time delivery rates, transit time variability, and carrier performance data needed to assess logistics risk.
Inventory Management System (IMS or ERP)
Pull safety stock levels, SKU velocity, and stockout history data required for the inventory risk section.
Demand Planning Software or Forecast Reports
Compare historical forecasts to actuals and identify product categories with high demand variability.
The Risk Assessment Checklist
Work through the groups below systematically. Items marked must represent non-negotiable audit points that carry the highest consequence if overlooked. Items marked should are strongly recommended for most operations. Nice-to-have items add depth for more mature programs.
Supplier & Sourcing Risk
Logistics & Transportation Risk
Inventory Risk
Demand Planning Risk
Financial & Compliance Exposure
Don't Audit in Isolation
A supply chain risk assessment completed by a single department will consistently miss blind spots. Procurement may not know about logistics service failures; finance may not be aware of supplier concentration risks. Bring representatives from operations, procurement, logistics, and finance into at least the findings review to ensure the full picture is captured. Risk assessments that surface uncomfortable gaps have the most value — resist the temptation to rate risks conservatively to avoid difficult conversations.
Once you have completed the assessment, map each identified risk to a likelihood and impact score. This will help you prioritise mitigation investment. For practical strategies to act on what you find, our article on supply chain resilience practices outlines approaches from dual sourcing to buffer stock that directly address common assessment findings.
Acting on Your Findings
Completing the checklist is step one. The value is in the follow-through. Prioritise risks by combining likelihood and potential financial impact, then assign mitigation tasks with clear owners. Your financial planning and business budgeting processes should reflect contingency reserves for your highest-rated risks.
Unactioned Risk Assessments Create False Confidence
An assessment that identifies risks but produces no mitigation plan can be worse than no assessment at all — it creates a documented record that vulnerabilities were known and ignored. Every material risk identified through this checklist should result in a documented decision: either a mitigation action with an owner and deadline, or an explicit, recorded acceptance of the risk by an accountable leader. Do not leave findings in a spreadsheet without an owner.
For supply-side gaps identified in this review, use structured criteria to evaluate alternative or backup suppliers. Our resource on supplier evaluation criteria provides a detailed breakdown of financial, operational, and ethical factors to weigh before committing to a new supplier relationship.
If this is your first formal risk assessment, consider pairing it with a logistics operations audit to ensure your internal processes are as well-examined as your external supply network. Teams newer to sourcing strategy may also benefit from clarifying the distinction between strategic sourcing and tactical purchasing before redesigning supplier relationships.
This article is for general informational and educational purposes only. It does not constitute legal, financial, or professional consulting advice. Consult qualified advisers for decisions specific to your organisation's circumstances.