Skip to content
Lean Supply Chain Risk Management

How many days would you last if your first supplier stopped on Monday?

Supply chain risk management is a mature discipline. What changed in 2025 and 2026 is not the theory: it is the frequency and the combination of shocks. An assessment frozen in 2024 measures a world that no longer exists. We replace the photograph with a film, using Lean methods.

You are

Four figures to frame the stakes

  • 3.7 years

    average frequency of a disruption lasting a month or more

    McKinsey, 2020

  • > 40%

    of a year’s profit wiped out, once a decade

    McKinsey, 2020

  • 3%

    of risk experts rate their supply chain “very resilient”

    Allianz, 2026

  • 51%

    see geopolitical paralysis as the most plausible extreme scenario

    Allianz, 2026

Why a 2024 assessment is out of date

  1. Sept 2025Cyber attack at Jaguar Land Rover: British plants idle for over a month, SME suppliers laying staff off.
  2. Oct 2025Nexperia crisis: European carmakers short of small chips, Volkswagen warns of a production stoppage.
  3. Feb 2026Hormuz closed and Suez suspended: Asia–Europe transits 8 to 15 days longer.
  4. Summer 2026Western Europe’s hottest summer on record, the Rhine near record lows: barges sailing a fraction full.
  5. Oct 2026The UK “Be Ready” campaign: every household asked to last three days on its own.

A frozen assessment gives each event a probability, then treats them one at a time. 2025 and 2026 added them up.

The method: count in days, not probabilities

Rather than guess the probability of an event nobody can forecast, MIT’s David Simchi-Levi measures two durations for every node: time to survive (how many days you can keep serving customers if that node goes down) and time to recover (how many days to get back to normal).

Where time to recover exceeds time to survive, the company is exposed. That is where the next stoppage hides, often at a small supplier nobody was watching.

Example
  • Time to survive
  • Time to recover

Steel, single supplierExposed : 33 days

Time to survive : 12 days. Time to recover : 45 days.

ERP serverExposed : 19 days

Time to survive : 2 days. Time to recover : 21 days.

Packaging, two sourcesCovered

Time to survive : 20 days. Time to recover : 10 days.

33 days exposed × €4,000 margin per day = €132,000 at stake. For a thirty-person company, that can be more than a year’s net profit.

Lean is not the defendant

Every crisis reopens the same trial: just-in-time emptied the warehouses. Lean does not forbid stock; it forbids stock that hides problems. Since Fukushima, Toyota, the inventor of just-in-time, has asked its suppliers to hold two to six months of chips, and its RESCUE database cut the time needed to locate the source of a problem from two weeks to twelve hours.

Why this is the “tomorrow” in the Phi-Lean house
End-to-end lead time
a short flow is a shorter exposure
VSM extended to suppliers
single points and real stocks become visible
Production levelling
less demand amplification upstream
Stop at the defect, problem solving
the reflexes of a crisis cell, already in place
Multi-skilled teams
the capacity to reorganise when a node goes down

For SMEs

The “How many days can you last?” diagnostic

A large company absorbs a shock with its cash, its lawyers and its buyers. An SME absorbs it with its owner. Research shows SMEs remain mostly reactive (Thun et al., 2011); that is where simple support has the most effect.

  • Genex UK, 17 staff, was never hacked: the Jaguar Land Rover shutdown was enough to lay off most of the team without pay.
  • Octave, 38 staff in Angers, restored its systems six weeks after a ransomware attack. Seven months after the attack, the court ordered its liquidation.
  • During the Hormuz crisis, 58% of UK SMEs that import or export said they were affected, with average losses of £38,207.
  1. Day 1

    See

    The flow mapped from supplier to customer on one A3 sheet, with your teams: stock in days, lead times, single points (supplier, machine, person, server).

  2. Day 2

    Count

    Time to survive and time to recover for your ten vital purchases and your top three customers, with each gap priced as margin at stake.

What you get

  • The map of your gaps, priced
  • Three priority actions, each with an owner and a date
  • A business continuity plan that fits on one page

For companies of 15 to 80 employees, adaptable beyond.

Ask for the diagnostic
Or start on your own with the free e-book (in French): 30 sheets, one a day

For mid-caps and large groups

Catch up with the state of the art in ninety days

Most boards still manage supply chain risk with a Value at Risk built once, shown to the auditors and filed. Six practices hold; we install them with your teams, without buying software before week eight.

  1. Map down to the tier that hurts

    Tier one invoices you; the risk often lives at tier three. Check that an apparent dual source does not rest on a single plant further up.

  2. Replace the photograph with a film

    A simple model of the network, time to survive and time to recover kept up to date, a stress test every quarter on combined scenarios.

  3. Choose your stock, do not suffer it

    A buffer where recovery exceeds survival; stock that protects nothing, released. A good stress test often frees as much cash as it ties up.

  4. Protect your smaller suppliers

    A large group is as resilient as the cash position of its most fragile supplier: pay on time, finance the stock you demand, write the continuity plan together.

  5. Put cyber and climate on the same map

    An IT incident at a provider does what a burnt-out plant does; a river too low does what a closed port does.

  6. Give the risk an owner

    A name, leading indicators reviewed every month, a crisis exercise once a year, a standing place on the board agenda.

Our offers

Extended mapping and stress test

Multi-tier VSM, time to survive and time to recover by node, combined scenarios, value at stake.

Deliverable : A living risk register, costed priorities, a 90-day roadmap.

Quarterly stress test

For clients already equipped: data refresh, new scenarios, leading indicators.

Deliverable : A dashboard and a board review.

SME supplier development

For large buyers: diagnostic of critical suppliers and joint continuity plans.

Deliverable : Stronger suppliers, and proof of continuity.

What a consultant should bring, and should not sell

No firm should sell you a new Value at Risk, bound and filed: it would be out of date before anyone read it. We bring an outside eye, a method, time and comparisons across industries, and we leave a capability, not a report: an internal team able to rerun the test alone, a live dashboard, a purchasing team that negotiates differently.

From the field

Manuel Gourmand ran the distribution supply chain of a supplier to the pharmaceutical industry: a raw material made in the United States, Germany, China and Korea, delivered to customers through eleven regional hubs. He knows the comfort of the complete document, and its limits.

Read Working Paper 26-04: the twelve-question self-audit and the 90-day plan

What is coming for suppliers

Governments are preparing their populations and counting on companies to keep essential chains running. Large buyers will pass these expectations on to their suppliers: questionnaires, proof of continuity, maps. The supplier who can say how many days it can last becomes the one that is kept.

With our partners: real-time line capacity (Factbird) feeds the time-to-survive calculation; TWI training for multi-skilling increases the teams’ capacity to reconfigure. Factbird

Sources

Let's talk about your flow

Thirty minutes on the phone is often enough to know whether a diagnostic makes sense, and on which scope. No commitment.