Before the Chain Snaps: A Supplier Resilience Audit for Lean UK Teams
Photo: Francisclarke, CC BY-SA 4.0, via Wikimedia Commons
Procurement in many UK SMEs still starts with a request for three quotes and ends with a purchase order. Price is visible, comparable and easy to defend. Resilience is none of those things. A supplier that looks competitive on a spreadsheet can become the most expensive failure on the balance sheet if it misses a delivery, loses a key site or withdraws credit. The practical response is not a large vendor management department. It is a scorecard that is simple enough to maintain and honest enough to expose single points of failure.
Start with process criticality, not spend
Before scoring any supplier, establish what would stop if that supplier failed. A low-spend consumable can be more critical than a high-spend service if it halts dispatch, payroll or customer access. Ask three template questions for every supplier relationship:
- Which process would stop within 48 hours if this supplier failed?
- Which customer promise, regulatory obligation or payment run depends on this supplier?
- Could we switch to an approved alternative within the current lead time, or would we need to redesign the process?
Suppliers that trigger a yes to any of the first two questions, and a no to the third, belong on the critical list. That list should be short. Most SMEs find that ten to twenty relationships carry the majority of operational risk. Scoring every supplier is an administrative exercise; scoring the critical few is a management control.
Five dimensions of a resilience score
A useful supplier scorecard tests more than delivery performance. Score each critical supplier from 1 to 5 on five dimensions, where 5 is resilient and 1 is fragile. Red flags matter more than the average score: one red flag on a critical supplier should trigger an action, even if the total score looks acceptable.
| Dimension | Core question | Red flag |
|---|---|---|
| Delivery reliability | Does the supplier meet agreed dates and quality standards consistently? | On-time-in-full below 95% for critical lines, or lead-time variance above 20% |
| Financial health | Is the supplier stable enough to trade through the next 12 months? | Overdue accounts, qualified audit opinion, county court judgments or sudden requests for deposits |
| Concentration risk | How dependent are we on one supplier, site or product line? | More than 30% of a critical category from one supplier with no tested alternate |
| Substitution options | Can we replace the supplier without stopping the process? | No approved alternate, proprietary specification, or switching time longer than current stock cover |
| Contract and transparency | Do we have clear exit, continuity and data terms? | Auto-renewal with no exit plan, no continuity clause, or no data return commitment |
Financial health without demanding management accounts
Most SMEs cannot obtain full management accounts from every supplier, and it would be unreasonable to ask. Use the signals that are available. Check filed accounts at Companies House, monitor payment behaviour and trade references, and note changes in credit terms. A supplier that moves from 30-day terms to payment in advance is telling you something about its working capital. A long relationship is not the same as a resilient relationship.
Template questions for the financial review are deliberately simple: Have accounts been filed on time? Has the supplier changed ownership, auditor or banking arrangements? Are there county court judgments or insolvency notices? Have lead times lengthened without explanation? Has the supplier reduced stockholding or withdrawn a service? None of these questions requires an audit. They require a quarterly check and a record of what changed.
Test substitution before you need it
Substitution is often assumed rather than tested. A critical supplier should have either an approved alternate or a documented plan for finding one. Ask whether the specification is proprietary, whether tooling or moulds are owned by the supplier, whether the alternate can meet quality standards, and how long qualification would take. If the answer is measured in months, the business needs buffer stock, a contract improvement or a live dual-sourcing project.
A simple substitution drill is more useful than a policy document. Once a quarter, take one critical supplier and ask operations, finance and commercial leads to walk through the first 30 days of a failure. Who calls customers? Who approves emergency spend? Which stock is ring-fenced? Who owns the alternate qualification? The drill exposes assumptions that a scorecard alone will miss.
Contracts, continuity and data
Contract review should focus on the clauses that matter during disruption: notice periods, price variation, continuity of supply, exit assistance, liability and data return. Where a supplier holds customer data or processes payments, confirm the data processing terms and deletion obligations. Where a supplier holds essential tooling, stock or records, confirm ownership and access. A scorecard without a contract action is just a rating exercise.
A quarterly cadence for a lean team
A workable cadence is one quarterly session of 60 to 90 minutes for the critical supplier list, plus 15 minutes per supplier for preparation. Assign one owner per critical relationship. Update the five scores, record any red flags, confirm contract renewal dates and agree one action per red flag. Use a simple red, amber and green status rather than a complex dashboard. Review the full list annually and refresh the criticality assessment whenever a process, customer or product changes.
The output should be a short action log: dual-source this item, increase buffer stock, request continuity wording, test an alternate, review credit terms, or prepare an exit plan. The scorecard is not the control. The actions it forces are the control. For UK SMEs, that discipline is a more realistic defence than waiting for the next disruption to reveal where the chain is thinnest.
