FAQ's

Reframe the conversation from cost to total risk-adjusted spend. Traditional cost accounting only captures operational expenses, not the cost of disruptions that didn't happen. Build a business case that includes: (1) Historical disruption costs—what did past supply chain failures actually cost in lost revenue, expedited shipping, and customer impact? (2) Probability-weighted scenarios showing expected annual disruption costs under current vs. resilient models. (3) Competitive risk—what happens if competitors build resilience and you don't? Most CFOs respond when you show that a 3% increase in baseline costs prevents potential 30% revenue hits, especially when demonstrated with real data from your own disruption history.

No, but you need to rebalance them. Efficiency still matters—waste is waste. The shift is recognizing that extreme efficiency optimization creates brittleness that's expensive when volatility strikes. Think of it as optimizing for a different objective function: instead of "minimize cost per unit," optimize for "minimize total cost including disruption impact." Track both efficiency metrics (cost, inventory turns, utilization) and resilience metrics (supplier diversity, time to activate alternatives, recovery speed from disruptions). The goal isn't choosing one over the other, but finding the right balance for your risk exposure. High-volume commodity products might stay efficiency focused. Critical, low-substitutability components need resilience prioritized.

Yes, and sometimes it's easier than for large enterprises because you can move faster. Start with your highest-risk components, the ones where disruption would hurt most. Build redundancy there first, even if it means accepting single-source for lower-risk items. Leverage supplier relationships differently — mid-sized companies often have closer partnerships that enable flexibility larger buyers can't access. Focus on adaptive planning over expensive technology: manual monitoring of key suppliers, regular scenario discussions with your team, pre-negotiated backup arrangements. You don't need AI-driven command centers to build resilience. You need clear-eyed assessment of your vulnerabilities and pragmatic steps to address the biggest risks first. Many mid-sized companies are actually more resilient than large ones because they're less locked into rigid processes and massive single-source contracts.