Purchasing organizations are exposed to risk in their interactions with suppliers, whether it is recognized and managed, addressed in a cursory manner, or altogether ignored. In order to understand the supply risk that exists, purchasing organizations can proactively assess the probability and impact of supply risk in advance, or reactively discover risk after a detrimental event occurs. The purpose of this study is to explore, analyze, and derive common themes on supply risk assessment techniques. Findings from this research indicate that purchasing organizations can assess supply risk with techniques that focus on addressing supplier quality issues, improving supplier processes, and reducing the likelihood of supply disruptions. From an agency theory perspective, these risk assessment techniques facilitate the obtaining of information by purchasing organizations to verify supplier behaviors, promoting goal congruence between buying and selling firms, and reducing outcome uncertainty associated with inbound supply.

Supply chains are increasingly susceptible to unplanned, unanticipated disruptions. With the implementation of the practices of lean systems, total quality management (TQM), time-based competition and other supply chain improvement initiatives, managers now realize that their supply chains are fragile, particularly to environmental disruptions outside their control. As a result of recent events including 11 September 2001, a system is now emerging in purchasing to manage supply risk characterised as having a very low probability of occurrence, difficult to predict, and with a potentially catastrophic impact on the organization. This paper presents case study research findings examining how and why firms create business continuity plans to manage this risk. Propositions are then presented from an institutional theory perspective to examine how various isomorphic pressures result in firms having similar risk management practices embedded in their supply management practices over time.

Purchasing organizations use various strategies and techniques to minimize the chance and impact of detrimental events occurring in the supply base. Supply risk assessments are a necessary first step in managing those risks. An analysis of in‐depth interviews with purchasing professionals from nine companies indicates that purchasing organizations often create contingency plans, and implement process‐improvement and buffer strategies in response to perceived supply risks discovered in assessments. Even though risk assessments, contingency plans, and risk management efforts are generally acknowledged as being important, many of those interviewed believed that there was not enough done in their organizations to mitigate supply‐related risks.