Procurement has always been responsible for selecting suppliers. Increasingly, it is also responsible for ensuring those suppliers can continue operating when disruption occurs. That is a fundamentally different challenge.
Competitive sourcing is no longer measured solely by price, quality, and delivery. Today’s procurement teams are expected to understand supplier dependencies, anticipate risk beyond Tier One, strengthen business continuity, and support supply chain resilience without undermining cost competitiveness.
Cisco recognised that supplier resilience could not be treated as a separate risk programme. It had to become part of procurement’s decision-making process. Over time, the company evolved its approach from traditional Business Continuity Planning to what it called Design for Resiliency, embedding risk considerations into supplier strategy, sourcing decisions, product design, and cross-functional planning. Procurement was no longer simply buying from resilient suppliers. It was helping build a more resilient supplier network.
For procurement leaders, that distinction is significant. The strongest supplier strategies are no longer defined by who negotiates the lowest cost, but by who builds a supply base capable of supporting the business when conditions become unpredictable.
Supplier Risk Doesn’t Stop at Tier One
One of the biggest lessons from the Japan earthquake was that direct suppliers were often not the source of the greatest risk. Many organisations maintained strong relationships with their Tier One suppliers but had little visibility into the lower tiers producing critical components. When disruption occurred, shortages quickly spread through the network because dependencies beyond the immediate supplier base were poorly understood.
Cisco responded by strengthening multi-tier supplier visibility, enabling the business to identify where critical materials and components originated and where supply interruptions were most likely to occur. Rather than focusing only on contractual suppliers, the company worked to understand the broader ecosystem supporting each product.
For procurement, this represents a significant change in mindset. Supplier management is no longer limited to organisations with whom contracts are signed. Understanding the resilience of lower-tier suppliers has become equally important.
Designing Resilience Into Sourcing Decisions
Procurement has traditionally managed supplier risk by qualifying alternative suppliers or maintaining safety stock for critical materials. Cisco expanded that thinking.
Its resilience strategy evolved from Business Continuity Planning to Proactive Risk Management and ultimately to Design for Resiliency, embedding risk considerations into sourcing and product decisions before disruption occurred.
That meant procurement was no longer simply evaluating suppliers on commercial terms. Alternative sourcing strategies were assessed earlier. Critical components were reviewed for concentration risk.
Engineering teams worked alongside procurement to reduce dependence on vulnerable technologies and single-source materials. Resilience became part of supplier selection rather than an activity that followed supplier appointment. This cross-functional approach reflects how procurement’s role has evolved. The best sourcing decisions now balance cost, availability, resilience, and long-term business continuity.
Measuring Recovery Instead of Assuming It
One of the practical measures used by Cisco to strengthen its resilience programme was Time-to-Recovery (TTR). Rather than asking whether a supplier might experience disruption, Cisco asked a more actionable question:
If this supplier fails, how quickly can supply be restored?
That simple shift changes procurement priorities. Suppliers with similar pricing and quality may present very different recovery capabilities. A supplier with a longer recovery time may require additional mitigation through dual sourcing, inventory strategies, or design changes.
By measuring recovery capability instead of relying solely on historical supplier performance, procurement can make sourcing decisions based on business impact rather than assumptions.
Resilience becomes measurable. Investment decisions become more targeted. Trade-offs become easier to justify.
Procurement Can’t Build Resilience Alone
Cisco’s experience also reinforces that resilience is rarely achieved by procurement acting independently. Supplier selection influences resilience, but so do engineering decisions, product architecture, manufacturing flexibility, logistics capabilities, and planning processes.
Recognising this, Cisco integrated resilience into cross-functional decision-making. Procurement worked alongside engineering to reduce dependency on vulnerable components, while manufacturing and supply chain teams developed greater flexibility across the network. Rather than relying on contingency plans after disruption occurred, the organisation focused on reducing structural vulnerabilities before they affected customers.
This is an important lesson for procurement leaders. Supplier resilience is strengthened through collaboration across the business, not through supplier management programmes in isolation.
Balancing Cost With Continuity
One of procurement’s most difficult responsibilities is balancing commercial performance with operational resilience. The answer is rarely to dual-source every component or increase inventory across every category.
Cisco’s approach demonstrates that resilience investments should be prioritised where disruption would have the greatest business impact. Some categories justify supplier diversification. Others require better visibility.
Some risks can be addressed through product redesign, while others demand stronger supplier collaboration or additional manufacturing flexibility. The objective is not to eliminate every risk. It is to understand where procurement intervention will protect customer service, revenue, and operational continuity most effectively.
Procurement’s Role in Building a More Resilient Supply Base
Supply chain disruption has increased procurement’s responsibility for enterprise resilience alongside its commercial role.
Cisco’s experience shows that resilience is built long before disruption occurs. It begins with understanding the supplier ecosystem, improving visibility beyond Tier One, evaluating recovery capability alongside traditional supplier metrics, and embedding resilience into sourcing decisions from the outset.
For procurement leaders reviewing their own supplier strategy, several practical questions are worth asking:
- Do we understand where our critical components originate beyond Tier One suppliers?
- Are sourcing decisions evaluated against recovery capability as well as cost and quality?
- Is procurement involved early enough in product and sourcing decisions to influence resilience?
- Have we identified suppliers whose failure would have the greatest impact on customers and operations?
- Are resilience investments focused on the categories that matter most to the business?
As supply chains become increasingly interconnected, procurement’s greatest contribution may not be negotiating lower prices. It may be helping build a supplier network that can continue performing when disruption becomes unavoidable.