Supplier risk is not just a large-enterprise problem. UK SMEs are disproportionately exposed because they typically have fewer alternative suppliers, less contractual protection, and less resource to monitor supplier health. This guide covers the types of supplier risk, how to conduct a risk assessment, what the Kraljic Matrix tells you about risk prioritisation, and how to use market analysis frameworks to maintain visibility of your supply base.
It has always been important for procurement professionals to be aware of the financial health and trading position of their suppliers. But the conditions UK SMEs face in 2026 — supply chain volatility, energy market disruption, geopolitical uncertainty, and tightening credit conditions — make this more urgent than ever.
The question to ask is simple: if a critical supplier — one whose products or services are essential to your continuing operation — went out of business next month, what would you do? If the honest answer is "scramble," your supplier risk management is inadequate.
| Risk type | What it means | Indicators to monitor |
|---|---|---|
| Financial risk | Supplier financial distress, insolvency, or inability to fund operations | Late filings, deteriorating credit scores, payment delays, stock price decline |
| Capacity risk | Supplier unable to fulfil delivery schedules, especially under disruption | Lead time drift, partial deliveries, workforce reductions |
| Cybersecurity risk | Supplier systems breached, exposing your data or disrupting their operations | Incident disclosures, outdated software, weak IT governance |
| ESG / reputational risk | Supplier involved in modern slavery, environmental violations, or poor labour practices | Audit findings, press coverage, NGO reports, country risk indices |
| Compliance risk | Supplier non-compliant with GDPR, industry regulations, or accreditation requirements | Lapsed certifications, regulatory sanctions, audit failures |
| Supplier/category risk | Market-level risk affecting an entire category or geography | Commodity price volatility, political instability, natural disasters |
| Single-source dependency | No viable alternative if the supplier fails or exits the market | Market structure (monopoly/duopoly), proprietary components, long qualification times |
A supplier risk assessment is not a one-time exercise. It should be a structured, repeatable process applied to your critical and high-risk suppliers at least annually, and to the broader supply base on a rolling basis.
The Kraljic Matrix, developed by Peter Kraljic and published in Harvard Business Review in 1983, remains the most widely used framework for categorising procurement spend by risk and profit impact. It places items in one of four quadrants:
Risk management effort should be concentrated on Strategic and Bottleneck quadrants. Leverage items carry low supply risk by definition. Routine items warrant minimal attention beyond efficient processing.
Three analytical frameworks are particularly useful for understanding supply market risk at the category level:
STEEPLED enables organisations to assess risks across the macro-environment in eight areas: Social, Technological, Economic, Environmental, Political, Legal, Ethical, and Demographical. Applied to procurement, it helps identify risks — and opportunities — that lie outside the immediate buyer-supplier relationship. A change in environmental regulation, for example, may fundamentally alter the cost structure of an energy or packaging category.
Porter's framework analyses the competitive dynamics of a supply market across five dimensions: rivalry among existing competitors, threat of new entrants, threat of substitutes, bargaining power of suppliers, and bargaining power of buyers. For procurement, the most immediately relevant forces are typically supplier bargaining power and the threat of substitutes — which together determine how much leverage a buyer has in a given market.
Carter's 10 Cs framework provides a structured checklist for evaluating whether a supplier is capable of meeting your needs: Competency, Capacity, Commitment, Control (governance), Cash (financial health), Cost, Consistency, Culture, Clean (ethical/environmental), and Communication. Applied systematically, it prevents the common error of selecting a supplier on price alone and discovering other deficiencies only after the contract is signed.
The structure of the supply market you are buying into fundamentally determines your risk exposure and negotiating position:
Use the IQ Benchmark Index to understand market rates across your key spend categories before your next negotiation or contract renewal.