Supply Chain Due Diligence: Single-Source Risk, Resilience and Supplier Health

Supply chain due diligence should reveal which external dependencies can interrupt production, compress margin or require cash after closing. Purchase-spend rankings are not enough: a low-value resin, tool, test service or software licence may be the only approved input for a major product. Investors need to map critical flows, test supplier health and alternatives, and translate disruption scenarios into sustainable earnings, working capital, capex and deal terms.

Map the supply chain around revenue at risk

Start with a product-to-supplier map, not a supplier list. For material product families, connect bills of material and routings to supplier sites, subcontractors, tooling, logistics lanes, ports, utilities and customer approvals. Identify the revenue and contribution dependent on each node.

Classify a source as single only after examining functional alternatives. Two supplier names may rely on the same upstream mill, geography, owner, tool or logistics route. Conversely, an alternate supplier in the master may never have produced an approved part at required volume. Record the level of qualification: identified, technically capable, sampled, customer-approved, commercially contracted or demonstrated at rate.

Test concentration in several dimensions

Analyse spend by supplier group, site, material, country and product. Then add operational measures:

• share of revenue dependent on the source;
• lead time and time to recover;
• inventory cover using usable, not total, stock;
• tooling and intellectual-property ownership;
• minimum order quantities and batch constraints;
• supplier capacity allocated to the target;
• customer or regulatory approval requirements;
• availability of substitutes and cost to qualify them.

A supplier with modest spend can have high revenue-at-risk. A large supplier may be replaceable if specifications are standard and qualification is proven. This criticality view should drive sample selection and management attention.

Validate performance and supplier health

Reconcile purchase orders, receipts, shortages, rejects, premium freight and line stops. Scorecards can be useful, but test their definitions, exclusions and manual adjustments. Review actual lead-time distributions and fill rates rather than contractual averages.

For critical suppliers, assess financial and operating resilience using available accounts, credit information, payment behaviour, plant capacity, quality trends, workforce issues, ownership changes and litigation or regulatory information. Obtain consented management calls or confirmations where the process permits. Late payment by the target itself can weaken small suppliers and create statutory or commercial exposure; in India, applicable delayed-payment provisions for micro and small enterprises require specific legal and accounting review.

Health is not only solvency. A profitable supplier can still lose a key approval, suffer a fire, depend on one ageing machine or prioritise a larger customer during shortages. Ask what has failed before and how the target responded.

Examine contracts and practical control

Review supply agreements, purchase terms, quality agreements and correspondence with legal advisers. Important questions include:

• Are price, indexation, currency, volume and minimum-purchase terms clear?
• Can the supplier terminate, suspend or change control after the acquisition?
• Who owns and insures tooling, patterns, data and inventory?
• Are audit, continuity, change-notification and subcontracting rights adequate?
• Can technical data be transferred to an alternate source?
• Are rebates or retrospective claims correctly accrued?

A favourable price without enforceable capacity or ownership rights may not support the forecast. Likewise, a buyer's operational leverage can be weaker than its share of supplier sales suggests if qualification takes many months.

Test resilience with scenarios

Select critical nodes and model credible disruptions: supplier shutdown, logistics closure, quality containment, cyber incident, commodity shortage or insolvency. Estimate detection time, inventory that is genuinely releasable, production loss, alternate qualification, expedite cost and recovery sequence. Confirm whether the business-continuity plan has been exercised with suppliers rather than merely documented.

Evaluate mitigation quality:

Mitigation consumes cash. Safety stock increases working capital and can become obsolete; dual sourcing may reduce volume discounts; duplicate tooling needs capex and maintenance. Model net resilience economics rather than treating every control as free.

Include responsible sourcing and compliance

Risk-based diligence should also consider labour, human rights, environment, safety, bribery, sanctions, trade controls and provenance in relevant tiers. The OECD's responsible-business-conduct guidance supports a risk-based process across operations, supply chains and business relationships. Certifications or supplier questionnaires can assist but should not replace evidence and follow-up.

Requirements vary by product, geography and customer. Legal and specialist advisers should determine the applicable laws, contractual obligations and reporting standards. Immediate harm should be addressed; transaction protections do not substitute for responsible remediation.

Connect findings to value and terms

Quantify supply findings through lost contribution, price changes, premium freight, scrap, buffer stock, qualification expense and tooling capex. Place each cash impact in time and avoid counting the same disruption in both lower earnings and a full revenue loss.

Depending on evidence and advice, a transaction response may include a forecast rebase, price change, working-capital adjustment, condition for supplier or customer consent, specific warranty, indemnity, escrow or a funded integration plan. Supplier engagement must respect confidentiality and deal protocols. Shree Sarada's transaction and business advisory services can help integrate these conclusions.

Conclusion

Resilient supply chains are built on visibility, proven alternatives and practical recovery capability. Diligence should identify the nodes that place cash flow at risk, test the strength of mitigation and ensure the investment case funds the resilience it assumes.