A supply chain risk assessment reduces zero risk on its own. It is a map. Risk falls only when leadership funds and sequences the work the map calls for and keeps monitoring after the map is delivered. We have watched a rigorous assessment die in implementation. The lesson belongs to every board.
In late 2025, contamination traced to a single third party ingredient supplier forced recalls of three global infant formula brands across 60 countries. Analysts estimate the losses may reach 1.4 billion euros. None of the three brand owners failed in their own plants. Their exposure lived one tier down the chain.
The pattern is compounding, not fading. United States recalls hit 858 million defective units in 2025, up 26 percent in one year. Food recalls reached a nine year high. Pharmaceutical recall volume rose 140 percent. Quality risk is now a supply chain property and the units affected keep growing even as recall counts fall.
After the Johnson and Johnson consumer recalls and a global automotive manufacturer's acceleration crisis, boards across industries asked the right question. Could that be us? Global quality risk assessments became standard practice.
We conducted one for a Fortune 50 company. The scope was global. The output was more than 150 findings, each tiered one, two or three by severity of risk to the brand, customers and suppliers. The tiering was the real product. A ranked list is a funding and sequencing instruction. It tells leadership exactly where the next dollar of risk reduction buys the most protection.
Between assessment and implementation, the program changed hands. Incoming leadership reprioritized the findings by opinion and every item became a priority one.
The arithmetic did what it always does. Funding and attention spread evenly across an undifferentiated list. A handful of items were implemented well. The vast majority died on the line. Years later, a meaningful share of the exposure that assessment uncovered has, in all likelihood, never been closed.
The assessment did not fail. The governance of implementation failed. A severity ranking that does not survive a leadership change was never a ranking. It was a suggestion.
Monitor continuously, not episodically. Suppliers change, formulations change and sourcing shifts with every cost cycle. Supply chain quality risk belongs on the standing board agenda with refreshed metrics, not in a study commissioned after the next crisis.
Protect priority integrity through every handoff. Severity tiers are a governance artifact, not a leadership preference. Any reprioritization should require rerunning the risk logic that produced the tiers, on the record. If one appointment can flatten the list, the board never controlled it.
Fund to the result you expect. If the board expects the tier one list closed in eighteen months, the funding must match that list. Flat funding against flat priorities produces something worse than ignorance: a documented list of known, unaddressed exposure.
The next assessment you commission will find the risks. Whether those risks are still open three years later is decided in the funding meeting, not the assessment. If your last risk assessment produced a report instead of a funded sequence, the exposure it found is still yours. Start with a diagnostic.
Thirty minutes with a senior partner. No deck, no pitch.
