Skip to content

The Weakest Link

The Weakest Link



by Phil Cotter, Managing Director, Thomson Reuters Risk Management Solutions

A multinational organisation’s supply chain is only as strong as its weakest link. Good global supply chain management should focus on sustainability, utilising a risk-based approach to ensure resources are deployed in the most efficient manner. It must be robust enough to expose weak links that may be hiding within complex webs of relationships.

Today’s multinational organisations tend to have multi-tiered global supply chains including vendors, partners, subcontractors and sponsors, linked together in complex webs of interrelationships traversing multiple jurisdictions. These complex networks can mask dangerous vulnerabilities: A problem in one area can quickly ripple up and down the chain, leading to severe reputational damage. One of the most effective methods of coping with complex, often hidden risks, especially for companies active in multiple jurisdictions, is to adopt the risk-based approach (RBA) outlined in the Financial Action Task Force’s (FATF) February 2012 “Recommendations for International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation.”

Areas of risks

Management of business relationships in the supply chain should be as important to organisations as managing their business relationships in the sales chain, a point underscored by both the US Foreign Corrupt Practices Act and the UK Bribery Act.

Effective supply chain management should address two key areas of risk:

• Supply and Price Risk Physical supply disruption can have a major impact on the price of raw materials obtained globally. Poor weather across the grain belt of Argentina, a hurricane in the Gulf of Mexico damaging oil refineries, port congestion in Rotterdam, interruptions suffered by utilities producing finished goods – all have the potential to affect supply and, ultimately, impact price.

• Supplier and Third-Party Risk Supply chains commonly consist of many diverse links, each vulnerable to different degrees and types of risk. This organisational risk is not limited to Tier 1 suppliers, but can reach far down the chain, even beyond Tier 3.

It is often not the complexity of the supply chain but lack of attentive management, transparency and consistent monitoring of suppliers from the beginning of the supply chain through to the end-consumer that leads to damage.

Webs of complexity

Every supply chain has a distinctive profile, with activity and geography as the principal variables. Certain activities and geographical regions are more likely to expose the organisation to risks, such as corruption, fraud and human trafficking. Misconduct even by a relatively minor supplier or internal operation can significantly impact the organisation’s reputation.

The need to operate an ethical business must be factored into the equation when assessing risks associated with the supply chain. Lapses that can expose the organisation to ethical concerns can include incomplete supplier databases and lack of necessary, comprehensive intelligence about risk at the supplier.

Two areas that have become particularly sensitive to governments are:

• Conflict minerals Ensuring that your supply chain is free of the recognised conflict minerals – tin, tantalum, tungsten and gold – is difficult because these minerals are also available from legitimate sources that participate routinely in compliant supply chains. The 2010 Dodd-Frank Act requires public companies to determine whether they use conflict minerals obtained from the war-torn Democratic Republic of the Congo and neighboring countries; the rules are intended to expose atrocities associated with the mining of these minerals.

• Modern-day slavery Far from being a thing of the past, slavery in the form of exploitative labor is alive and well in many parts of the world. In the UK, the Modern Slavery Act, “provides law enforcement with stronger tools to stamp out modern slavery, ensure slave drivers can receive suitably severe punishments and enhance protection of and support for victims.”

Effective supply chain management must ensure that the organisation is “slavery proof.” Ethical sourcing protects organisations from severe reputational damage.

Visibility & traceability

Achieving sufficient visibility into the organisation’s Tier 1 suppliers is difficult enough; the task only becomes more arduous with Tiers 2, 3 and beyond. Yet, supply chain disruptions in the past five years have shown how critical it is to have visibility at the sub-tier supplier level. Food manufacturers, for example, have cut corners to meet tight schedules or price margins, highlighting the difficulty of tracking materials from origin to finished product. This can result in quality deficiencies that have significant knock-on effects throughout the supply chain.

Creating sustainability

Addressing the dangers posed by a complex global supply chain begins with sustainability. Creating sustainability within the global supply chain goes handin- hand with a thorough KYS programme. The best route to sustainability is through adoption of a holistic approach that delves more deeply into the supply chain. The reputational risks to supply chains that do not embrace sustainable principles are far too onerous to be ignored. Incorporating socially responsible practices into the supply chain may be the quickest route to creating a profitable business with long-term viability.


Consistently meeting regulatory requirements is a vital element of sustainability. Regulators are adopting a zero-tolerance policy toward organisations that do not keep track of where their supply chains operate and with whom they do business.

Many countries that have become major suppliers to developed-world businesses in recent decades are conducting more frequent enforcement actions, making extra vigilance imperative.

Mitigating risks & keeping a step ahead

Ideally, companies should follow a continuous RBA process that begins with:

• Assessing the current state of the supply chain

• Pinpointing critical vulnerabilities

• Creating a prioritised road map for improvement

An important part of this assessment is to ensure organisations can more easily identify its greatest potential value losses.

° capture all third-party data

° frequent updating of data storage systems

° construct real-time, visual, value chain networks

° map value flows, geographical locations of operations and transportation links

It is not enough to screen a supplier at the onboarding stage. Routine screening of an organisation’s supplier databases is vital to ensure that its suppliers are not on any sanction or watch list. Moreover, an ethical background check or enhanced due diligence (EDD) should be conducted on the supplier to ascertain that it has not been involved in unlawful conduct. Industry experts advise routine screening of existing suppliers as best practice.


Customers, consumers and governments hold companies accountable not only for their own actions, but for the actions of their suppliers, vendors and business partners. Remember, your organisation is only as strong as its weakest link. Being aware of the risks your organisation faces – supply, supplier and price – and adopting a best-practice supply chain management process, building on an accountable, risk-based approach, will keep your organisation on the right side of regulators whilst ensuring supply-chain sustainability and allowing you to move forward with confidence.