# Supplier Risk Assessment Questionnaire > Source: https://netray.co/tools/supplier-risk-assessment-questionnaire > Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems. > Section: Free Tools ## Short answer A 10-question supplier risk assessment covering single-source, financial health, quality, geography and continuity. Get a risk band and next steps. ## Category supply-chain ## Audience - Buyer - Supply chain manager - Supplier quality ## Tool **Kind:** assessment **Questions:** #### How many qualified sources do you have for the item or commodity? **Help:** Qualified means approved and able to ship within your normal lead time. **Options:** ##### Single source, no alternative qualified **Score:** 0 ##### Second source identified but not qualified **Score:** 1 ##### Two qualified sources, uneven split **Score:** 2 ##### Two or more qualified sources with active volume **Score:** 3 #### How much of the supplier's revenue do you represent? **Options:** ##### Over half, they depend on us heavily **Score:** 2 ##### 10 to 50 percent **Score:** 3 ##### Under 10 percent, we have little leverage **Score:** 1 ##### Unknown **Score:** 0 #### What is the supplier's financial health? **Help:** Use a credit report, financial statements or payment behavior as evidence. **Options:** ##### Distress signs: late payments, losses or credit warnings **Score:** 0 ##### No recent financial review **Score:** 1 ##### Stable but thin margins **Score:** 2 ##### Reviewed in the last 12 months and sound **Score:** 3 #### How has quality performed over the last 12 months? **Options:** ##### Repeated escapes or open corrective actions **Score:** 0 ##### Occasional issues, actions slow to close **Score:** 1 ##### Few issues, actions closed on time **Score:** 2 ##### No significant escapes, strong ratings **Score:** 3 #### How reliable is delivery? **Options:** ##### Below 80 percent on time **Score:** 0 ##### 80 to 90 percent on time **Score:** 1 ##### 90 to 95 percent on time **Score:** 2 ##### Above 95 percent on time **Score:** 3 #### How exposed is the supplier's location to disruption? **Help:** Consider natural hazards, political risk, port or border dependence and single-site production. **Options:** ##### High exposure and single site **Score:** 0 ##### High exposure but multiple sites **Score:** 1 ##### Moderate exposure **Score:** 2 ##### Low exposure with redundancy **Score:** 3 #### How concentrated is the supplier's own supply of critical raw material or components? **Options:** ##### Unknown sub-tier visibility **Score:** 0 ##### Known but single sub-tier source **Score:** 1 ##### Known with some alternatives **Score:** 2 ##### Mapped and monitored with alternatives **Score:** 3 #### Does the supplier have a tested business continuity plan? **Options:** ##### No plan **Score:** 0 ##### Plan exists but untested **Score:** 1 ##### Plan tested in the last two years **Score:** 2 ##### Plan tested and shared with customers **Score:** 3 #### How easily could you move the work to another source? **Help:** Consider tooling ownership, approvals, qualification time and drawings. **Options:** ##### More than a year, tooling or approvals locked in **Score:** 0 ##### 6 to 12 months **Score:** 1 ##### 3 to 6 months **Score:** 2 ##### Under 3 months, tooling and data owned by us **Score:** 3 #### How would you rate compliance exposure (sanctions, export controls, ESG, regulations)? **Options:** ##### Open issues or no screening done **Score:** 0 ##### Screened once, no recurring checks **Score:** 1 ##### Screened regularly, minor gaps **Score:** 2 ##### Screened regularly, no gaps, documents on file **Score:** 3 **Bands:** #### High risk **Min:** 0 **Max:** 39 **Verdict:** This supplier or commodity needs action now. A disruption would likely hit your production or customers. **Recommendations:** - Start qualifying an alternate source immediately - Build safety stock for critical items while you qualify - Schedule an on-site audit and review open corrective actions - Review financial position and escalate to management #### Elevated risk **Min:** 40 **Max:** 64 **Verdict:** There are meaningful gaps. The supplier is workable but needs a mitigation plan with owners and dates. **Recommendations:** - Document the top three risks and assign owners - Qualify a second source for the highest spend or highest impact items - Request the supplier's continuity plan and sub-tier map - Increase review frequency to quarterly #### Moderate risk **Min:** 65 **Max:** 84 **Verdict:** The position is reasonable. Keep monitoring and close the specific gaps that scored low. **Recommendations:** - Address any question scored 0 or 1 individually - Review performance data twice a year - Confirm tooling ownership and drawing control #### Low risk **Min:** 85 **Max:** 100 **Verdict:** The supplier looks resilient on the dimensions assessed. Maintain normal monitoring. **Recommendations:** - Reassess annually or after a significant change - Keep certificates and screening records current - Share forecasts early to keep capacity aligned ## Content **Intro:** Supplier risk is rarely one big event; it is a combination of single sourcing, weak finances, quality drift and geography. This questionnaire scores ten dimensions quickly so buyers and supplier quality teams can decide which suppliers need mitigation first. **Sections:** #### How to use the questionnaire **Body:** Answer for one supplier and one commodity at a time, since a supplier can be low risk for catalog items and high risk for a single-sourced custom part. Base answers on evidence such as delivery data, audit reports and credit checks, not impressions. Run it across your top suppliers by spend and by criticality, then rank the results to build a mitigation list. #### The method behind the score **Body:** Each question scores 0 to 3 and the total is converted to a percentage of the maximum, then mapped to a band. Higher scores mean lower risk. The ten dimensions cover supply base, financial health, quality, delivery, location, sub-tier exposure, continuity, switching cost and compliance. This is a screening tool, not a full enterprise risk model: it ranks attention, it does not predict failures. **Bullets:** - Impact: how bad would a disruption be for you - Likelihood: how probable is a disruption - Detectability: how early would you notice a problem - Recoverability: how quickly could you switch source #### Reading the result and common mistakes **Body:** Look at individual low answers as well as the band. A supplier with an overall moderate score but a zero on single source and a zero on switching time is still a serious exposure. Do not equate a small supplier with high risk or a large one with low risk. Also avoid one-off exercises: set a refresh schedule and update the assessment after incidents, acquisitions or capacity changes. #### Using ERP data **Body:** Much of the evidence already exists in your ERP: on-time delivery from receipts, rejects from inspection, spend share and number of approved sources per item. Pull those numbers instead of guessing. In SAP, Oracle, SyteLine, Epicor or Dynamics, a simple report of items with only one active vendor is a good first risk list. **Cta:** If you want single-source items, delivery trends and reject rates pulled from your ERP into a standing risk view, Netray can build that on your own data. **Faq:** #### What is a supplier risk assessment? **Answer:** It is a structured review of how likely a supplier is to disrupt your operations and how severe the impact would be. It typically covers financial, operational, quality, geographic, compliance and sourcing risks, ending with a rating and a mitigation plan. #### How often should I reassess supplier risk? **Answer:** Critical suppliers are often reassessed at least annually and after major events like acquisitions, plant moves, financial warnings or serious quality escapes. Lower risk suppliers can be reviewed every two years or by exception. #### What is the biggest supplier risk in manufacturing? **Answer:** Single sourcing of a critical item with high switching cost is usually the largest exposure, because any disruption has no quick alternative. Combine it with financial weakness or a single site and the risk compounds. #### Is this a replacement for a full supply chain risk program? **Answer:** No. It is a quick screening tool that ranks suppliers for attention. A full program adds continuous monitoring, sub-tier mapping, scenario planning and formal governance, often with commercial risk data services. ## Search terms supplier risk assessment, supplier risk assessment questionnaire, supplier risk assessment template, vendor risk assessment manufacturing, supply chain risk assessment questionnaire, supplier risk evaluation form, single source supplier risk, supplier risk rating --- Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json