Close Menu
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
More items
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
X (Twitter) LinkedIn
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
Login
LinkedIn Bluesky
Resilience Forward
Subscribe Now
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
Resilience Forward
You are at:Home»Managing resilience»Supply chain resilience»70% of businesses have faced the failure of a critical supplier; and replacing a supplier takes an average of 25 days
Supply chain resilience

70% of businesses have faced the failure of a critical supplier; and replacing a supplier takes an average of 25 days

July 30, 20263 Mins Read
Supply chain failure

A new report from Ivalua has found that, in the past 12 months, 70% of businesses have had between one and five critical suppliers fail, while 41% say they’re one supplier failure away from a supply chain crisis.

Ivalua’s report, Building Resilience from the Ground Up: Anchoring Supplier Risk in a Unified System of Record, surveyed 800 supply chain and procurement decision-makers. It found that businesses take 25 days on average to identify and onboard a replacement supplier, during which 74% are exposed to shortages or significant operational disruption. More concerning still, 57% admit that they are reacting to these events rather than being proactive.

Reactive behaviours in response to disruption mean that much of this supply chain fragility goes undetected until it is too late. Over half of businesses (53%) have little to no visibility into the cyber security posture of their suppliers, and 51% admit that a major supplier cyber incident would catch them entirely by surprise. Other areas of limited visibility include ESG performance and risk (53%), financial health (44%), operational capacity and delivery performance (41%), and compliance status, including certifications and regulatory requirements (40%).

Supplier failure is no longer an exception; it is a cost of doing business. The organizations suffering the most aren’t necessarily those with weaker suppliers, but those blind to risks until it’s too late. With inflation, tariffs, and rising costs already stretching operations, a single supplier failure can be the tipping point that pushes an already strained supply chain into collapse.

Jarrod McAdoo, director at Ivalua

Closing the visibility gap

Businesses are also grappling with fragmented data, making it difficult to identify risks before they escalate. The findings show that 45% of businesses have no single, trusted view of supplier risk across the organization. Crucially, 76% still rely on manual processes for due diligence and risk checks on critical suppliers, with 58% agreeing that their reliance on spreadsheets leaves them exposed to human error. As a result, blind spots remain: over half (53%) report low or no visibility into their sub-tier suppliers, and almost three-quarters (73%) say they would like to spot supplier distress earlier to prevent disruption.

AI plays an important role in helping to predict supplier failure and plan for it holistically, but only 39% of businesses are currently using AI in supplier due diligence or risk monitoring. Further, AI’s potential is limited by the quality of the underlying data, with 50% agreeing that their supplier data is not AI-ready, limiting their ability to scale analytics and surface risk early.

Methodology

The survey was conducted by Sapio Research on behalf of Ivalua in March 2026. It is based on a survey of 800 supply chain and procurement decision-makers in the US (200), UK (200), Germany (200), and France (200).

Obtain the report
Europe North America UK
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp
Previous ArticleUK Resilience Academy publishes new standards for resilient leadership
Next Article One in four malicious breaches is AI-enabled, IBM study finds

Related Posts

A female worker looks over the top of her laptop to make sure no-one can see what she is doing.

New report highlights the huge scale of the shadow AI problem

October 8, 2026
A finger points to a green tick on a box, which is next to a red cross on a box.

Resilience is an evidence problem

October 8, 2026
A series of white cubes crumble into a pile.

Impact analysis: how to assess the true cost of a cyber breach

October 7, 2026
Mission critical downtime concept

Operational resilience is key for organizations protecting mission-critical infrastructure

October 7, 2026
Cyber threats concept

Cyber security’s biggest vulnerability? It’s still people

October 7, 2026
A solar farm with associated wind turbines.

The resilience challenges of the renewable energy transition

October 2, 2026
Advertisement
Resilience First
This week's most read articles
intangible assets concept

The protection gap: many organizations are failing to protect intangible assets

May 10, 2024
Open lorry car trunk full of moving cardboard boxes and furniture outdoors at city street.

HP Wolf study finds growing concern about attacks on hardware supply chains

August 6, 2024
Cyber threats concept

Cyber security’s biggest vulnerability? It’s still people

October 7, 2026
Latest resources
A finger points to a green tick on a box, which is next to a red cross on a box.

Resilience is an evidence problem

October 8, 2026
Load More

Subscribe to Updates

Get our Resilience Updates newsletter.

Most Popular Feature Articles
Three dark coloured light bulbs on a black background illustrate the concept of The Dark Triad in Crisis Management.

The Dark Triad in crisis management

Five stage crisis management framework

A five stage framework for a crisis management process

Blue interconnected gears and network nodes symbolizing automation and complex machinery.

Agent zero – the 2028 digital pandemic

Latest Reports
Global risks concept

UN report warns that the global risk landscape is being redrawn

Three blank wooden signs against a blue sky.

System restoration is not business continuity: research finds that ‘most cyber recovery plans are built for the wrong outcome’

BCI Continuity and Resilience Report 2026 cover.

BCI report sees growing structural divide between business continuity and resilience

A promo box for an article about resilience governance.
© 2026 Resilience Forward
  • About Resilience Forward
  • Newsletter
  • Newsfeed
  • Advertise
  • Call for Papers
  • Contact
  • Privacy Policy and Cookie Use
  • AI Use Policy

Type above and press Enter to search. Press Esc to cancel.

Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Ad Blocker Enabled!
Ad Blocker Enabled!
Our website is made possible by displaying online advertisements to our visitors. Please support us by disabling your Ad Blocker.

Sign In or Register

Welcome Back!

Login to your account below.

Lost password?