- Home
- Consulting
- Lean Supply Chain Risk Management
How many days would you last if your first supplier stopped on Monday?
Supply chain risk management is a mature discipline. What changed in 2025 and 2026 is not the theory: it is the frequency and the combination of shocks. An assessment frozen in 2024 measures a world that no longer exists. We replace the photograph with a film, using Lean methods.
Four figures to frame the stakes
3.7 years
average frequency of a disruption lasting a month or more
McKinsey, 2020
> 40%
of a year’s profit wiped out, once a decade
McKinsey, 2020
3%
of risk experts rate their supply chain “very resilient”
Allianz, 2026
51%
see geopolitical paralysis as the most plausible extreme scenario
Allianz, 2026
Why a 2024 assessment is out of date
- Sept 2025Cyber attack at Jaguar Land Rover: British plants idle for over a month, SME suppliers laying staff off.
- Oct 2025Nexperia crisis: European carmakers short of small chips, Volkswagen warns of a production stoppage.
- Feb 2026Hormuz closed and Suez suspended: Asia–Europe transits 8 to 15 days longer.
- Summer 2026Western Europe’s hottest summer on record, the Rhine near record lows: barges sailing a fraction full.
- Oct 2026The UK “Be Ready” campaign: every household asked to last three days on its own.
A frozen assessment gives each event a probability, then treats them one at a time. 2025 and 2026 added them up.
The method: count in days, not probabilities
Rather than guess the probability of an event nobody can forecast, MIT’s David Simchi-Levi measures two durations for every node: time to survive (how many days you can keep serving customers if that node goes down) and time to recover (how many days to get back to normal).
Where time to recover exceeds time to survive, the company is exposed. That is where the next stoppage hides, often at a small supplier nobody was watching.
- Time to survive
- Time to recover
Steel, single supplierExposed : 33 days
Time to survive : 12 days. Time to recover : 45 days.
ERP serverExposed : 19 days
Time to survive : 2 days. Time to recover : 21 days.
Packaging, two sourcesCovered
Time to survive : 20 days. Time to recover : 10 days.
33 days exposed × €4,000 margin per day = €132,000 at stake. For a thirty-person company, that can be more than a year’s net profit.
Lean is not the defendant
Every crisis reopens the same trial: just-in-time emptied the warehouses. Lean does not forbid stock; it forbids stock that hides problems. Since Fukushima, Toyota, the inventor of just-in-time, has asked its suppliers to hold two to six months of chips, and its RESCUE database cut the time needed to locate the source of a problem from two weeks to twelve hours.
Why this is the “tomorrow” in the Phi-Lean house- End-to-end lead time
- a short flow is a shorter exposure
- VSM extended to suppliers
- single points and real stocks become visible
- Production levelling
- less demand amplification upstream
- Stop at the defect, problem solving
- the reflexes of a crisis cell, already in place
- Multi-skilled teams
- the capacity to reorganise when a node goes down
For SMEs
The “How many days can you last?” diagnostic
A large company absorbs a shock with its cash, its lawyers and its buyers. An SME absorbs it with its owner. Research shows SMEs remain mostly reactive (Thun et al., 2011); that is where simple support has the most effect.
- Genex UK, 17 staff, was never hacked: the Jaguar Land Rover shutdown was enough to lay off most of the team without pay.
- Octave, 38 staff in Angers, restored its systems six weeks after a ransomware attack. Seven months after the attack, the court ordered its liquidation.
- During the Hormuz crisis, 58% of UK SMEs that import or export said they were affected, with average losses of £38,207.
Day 1
See
The flow mapped from supplier to customer on one A3 sheet, with your teams: stock in days, lead times, single points (supplier, machine, person, server).
Day 2
Count
Time to survive and time to recover for your ten vital purchases and your top three customers, with each gap priced as margin at stake.
What you get
- The map of your gaps, priced
- Three priority actions, each with an owner and a date
- A business continuity plan that fits on one page
For companies of 15 to 80 employees, adaptable beyond.
Ask for the diagnosticFor mid-caps and large groups
Catch up with the state of the art in ninety days
Most boards still manage supply chain risk with a Value at Risk built once, shown to the auditors and filed. Six practices hold; we install them with your teams, without buying software before week eight.
Map down to the tier that hurts
Tier one invoices you; the risk often lives at tier three. Check that an apparent dual source does not rest on a single plant further up.
Replace the photograph with a film
A simple model of the network, time to survive and time to recover kept up to date, a stress test every quarter on combined scenarios.
Choose your stock, do not suffer it
A buffer where recovery exceeds survival; stock that protects nothing, released. A good stress test often frees as much cash as it ties up.
Protect your smaller suppliers
A large group is as resilient as the cash position of its most fragile supplier: pay on time, finance the stock you demand, write the continuity plan together.
Put cyber and climate on the same map
An IT incident at a provider does what a burnt-out plant does; a river too low does what a closed port does.
Give the risk an owner
A name, leading indicators reviewed every month, a crisis exercise once a year, a standing place on the board agenda.
Our offers
Extended mapping and stress test
Multi-tier VSM, time to survive and time to recover by node, combined scenarios, value at stake.
Deliverable : A living risk register, costed priorities, a 90-day roadmap.
Quarterly stress test
For clients already equipped: data refresh, new scenarios, leading indicators.
Deliverable : A dashboard and a board review.
SME supplier development
For large buyers: diagnostic of critical suppliers and joint continuity plans.
Deliverable : Stronger suppliers, and proof of continuity.
What a consultant should bring, and should not sell
No firm should sell you a new Value at Risk, bound and filed: it would be out of date before anyone read it. We bring an outside eye, a method, time and comparisons across industries, and we leave a capability, not a report: an internal team able to rerun the test alone, a live dashboard, a purchasing team that negotiates differently.
From the field
Manuel Gourmand ran the distribution supply chain of a supplier to the pharmaceutical industry: a raw material made in the United States, Germany, China and Korea, delivered to customers through eleven regional hubs. He knows the comfort of the complete document, and its limits.
What is coming for suppliers
Governments are preparing their populations and counting on companies to keep essential chains running. Large buyers will pass these expectations on to their suppliers: questionnaires, proof of continuity, maps. The supplier who can say how many days it can last becomes the one that is kept.
With our partners: real-time line capacity (Factbird) feeds the time-to-survive calculation; TWI training for multi-skilling increases the teams’ capacity to reconfigure. Factbird
Sources
- McKinsey Global Institute (2020). COVID-19 and climate change expose dangers of unstable supply chains. (opens in a new tab)
- Allianz Commercial (2026). Allianz Risk Barometer 2026: Business interruption. (opens in a new tab)
- Simchi-Levi, D., Schmidt, W., & Wei, Y. (2014). From superstorms to factory fires. Harvard Business Review, 92(1–2), 96–101. (opens in a new tab)
- Elsayed, M., Grosse Steffen, C., & Marx, M. (2026). Global supply chain tensions: Not all disruptions are alike. Banque de France. (opens in a new tab)
- Barrett, E. (2021). How Toyota kept making cars when the chips were down. Fortune. (opens in a new tab)
- Reuters (2021). How Toyota thrives when the chips are down. The Japan Times. (opens in a new tab)
- Bibby Financial Services (2026). 70% of UK importers and exporters fear bankruptcy as Iran war hampers supply chains. (opens in a new tab)
- BBC News (2025). Suppliers’ uncertainty despite JLR expected restart (AOL republication). (opens in a new tab)
- Clubic (2025). Une entreprise de logiciels basée en France terrassée par une cyberattaque. (opens in a new tab)
- Thun, J.-H., Drüke, M., & Hoenig, D. (2011). Managing uncertainty: An empirical analysis of supply chain risk management in SMEs. International Journal of Production Research, 49(18), 5511–5525. (opens in a new tab)
Let's talk about your flow
Thirty minutes on the phone is often enough to know whether a diagnostic makes sense, and on which scope. No commitment.
