We’ve been talking a lot about the Busch-Lamoureux Exact Purchasing Pocket-Cube model lately because we’re never going to solve the exponentially proliferating Procurement problems unless we fix the fundamentals. And when it comes to risk management, it’s pointless unless the risks being managed are the ones that really matter relative to their criticality which should be defined not by Risk Management, but by Procurement based on the importance of the categories they impact.
If you look at risk in isolation, you’re going to focus on:
Traditional Risks
- limited commodities, especially foodstuffs, where bad yields or natural disasters wipe them out, or minerals that come from limited mines
- transportation shortages, where routes are at capacity and any man-made or natural event that impacts the lane in any way causes a shortage
- factory limitations, as it’s a custom product that can only be produced by a few existing factories without extensive customization
And you’re going to completely ignore:
- restricted commodities, where a significant percentage of global production comes from a single region, or country (and when that gets cut off, a glut of supply suddenly becomes a dearth of supply)
- global transportation chokepoints, and what happens when a lack of rainfall limits the amount of traffic that can pass through the Panama Canal, the Red Sea closes, the Strait of Hormuz is cut off, etc.
- local transportation chokepoints, such as the ILA controlled east-coast ports in US or the ILWU controlled west-coast ports in the US, and a strike cuts off your routes and back-up routes
- skilled worker limitations because it’s not just the factory, it’s the work force, and if most of the workforce is > 60 and the educational/mentorship programs that trained the next generation workers were shut down … that factory is gone in a few years
And what you address might not be that important.
If you’re a traditional mechanical manufacturer, you’re only dependent upon rare earths for magnets and lighting, as most rare earths are in electronics. If you’re monitoring anything beyond the rare earths used in the magnets and lights you need to make/source, you’re wasting your time.
If everything being sourced through a taxed transportation network could be sourced from somewhere else through a network with a lot of capacity, at only a slightly higher price point, then you don’t really care about that transportation network.
If you’re dependent on two factories, and you aren’t monitoring the turnover, the influx of new workers, and the output of future workers in the local economy, you will someday, without warning, find yourself needing to find a new factory with a new supplier that will need to customize their production lines, processes, and workforce to your needs … which they may not be able to accomplish in time to keep your supply chain flowing and main product line in stock — which could risk your entire business model.
Meanwhile, you don’t notice the risk above where
- 60% of the rare earth you depend on for your magnets are coming from different suppliers in China, so when a pandemic strikes and China institutes a no tolerance policy against a virus that can’t be eliminated, your supply goes up in smoke (and you had no warning to secure as much supply as you could while you still could)
- you weren’t watching for events that could close the Strait of Hormuz (thinking the Red Sea was the end of it) and aren’t watching the Strait of Malaca (which carries almost 25% of global trade … so if the pirates leave Africa …)
- you will get shocked when the ILWU contract expires on July 1, 2028 and the US West Coast ports shut down as the pay increase that was negotiated in the last round is NOT keeping up with the inflation your current administration is creating;
- and so on.
And if you attempt to solve your supply chain risk identification by acquiring a multi-tier supply chain visibility and monitoring solution, you’ll get sucked down every risk rabbit hole that is identified based upon every raw material used anywhere in your supply chain and detected impact event.
Unless you are properly categorizing your purchases using Busch-Lamoureux Exact Purchasing, identifying those categories both high-risk and high-impact, and identifying what risks would be devastating to you, you aren’t addressing the right risks and any attempt at a structured conversation will be a waste of time.
And only then will you be able to identify:
- where the impacts will be felt,
- which functions need to be involved,
- who should own the risk,
- why identified monitoring via subscription data feeds is needed,
- when a risk-related event is significant and needs to be manually assessed/addressed,
- what needs to be done if significance is determined, and
- how response success will be determined.
And then you can use the tips offered up by Greg Schlegel in his We Discuss Risk Regularly post to have truly successful risk management conversations.
