Single Source Supplier Risk: What You're Really Exposed To

Almost every manufacturer has them: parts that only one supplier makes, or that only one supplier has ever been qualified to make. Most of the time, that supplier delivers and nobody thinks about it. Single source supplier risk is invisible right up to the morning the call comes in: a fire, a bankruptcy, a cyberattack, a quality stop, and suddenly a $4 part is holding up a $4 million order.

This article explains what that exposure really is, why it persists in well-run companies, and what it means when the risk finally lands.

Signs Your Single-Source Exposure Is Bigger Than You Think

You cannot quickly produce a list of every part that has only one qualified source.
Single sourcing was never a decision. It just happened over time.
Qualifying an alternate would take months because of customer approvals, tooling or testing.
You know little about your single-source supplier's financial health or their own suppliers.
The tooling for critical parts sits in the supplier's building, and ownership is unclear.
Your contingency plan is "we'd figure it out."

What the Exposure Actually Is

Single source vs. sole source matters here. A sole source is the only supplier that exists; a single source is the only supplier you chose. Either way, the exposure is the same: when that supplier stops, so do you. The cost is not the price of the part. It is the value of everything the part goes into, multiplied by every day you cannot ship.

On top of lost revenue come the recovery costs: emergency qualification, expedited tooling, premium pricing from whoever can help, customer penalties and, in regulated industries, approval delays that no amount of money can shorten. The companies hit hardest are rarely the ones with the most single-source parts. They are the ones who did not know which parts they were.

Why Single-Source Risk Keeps Getting Ignored

Single sourcing usually makes good business sense when it is set up: better pricing, simpler quality control, a stronger relationship. The risk accumulates quietly as volumes grow and alternatives are never developed.

The common reaction to a scare is to announce "dual source everything." That sounds decisive, but it is expensive, slow, and often impossible for engineered or customer-controlled parts. The initiative stalls, and the organization concludes nothing can be done.

The other reaction is to add safety stock. Inventory buys time, but it ties up cash, ages, and still runs out if the disruption lasts longer than expected.

What Being in Control Looks Like

A company in control of single-source risk knows exactly where its exposure is and how severe each case would be. It has made deliberate choices: which dependencies to accept, which to mitigate and which to eliminate. It has visibility into the health of critical suppliers, and for its most dangerous exposures there is a realistic recovery plan that has been thought through before it is needed, not during the crisis.

What the Turnaround Typically Looks Like

The typical pattern: a manufacturer discovers after a near miss that far more of its revenue depends on single-source parts than anyone realized. Once the exposure is mapped, ranked and matched with deliberate responses instead of a blanket "dual source everything" push, leadership can finally answer the question "what happens if they go down?" and the next disruption becomes a managed event rather than a scramble.

Frequently Asked Questions

What is the difference between single source and sole source?

A sole source is the only supplier capable of providing a part. A single source is one supplier chosen from several possible options. Both create dependency risk, but they call for different responses.

Is single sourcing always bad?

No. It often delivers better cost and quality. The risk comes from unmanaged single sourcing, where nobody has assessed or planned for the dependency.

Isn't more safety stock enough?

Safety stock buys time for short disruptions, but it ties up cash and runs out during long ones. It is one tool, not a strategy.

What should we do if a single-source supplier is already down?

Stabilize first: protect customers and secure what supply exists. Then address the longer-term dependency. Our situation page for this scenario explains how we engage.

If This Is Your Situation

"Our single-source supplier just went down." If that sentence sounds like your week, you don't need another article. You need someone who has fixed it before to look at your specific situation. See how we approach this situation, or request a Situation Review. Tell us what's going on in a few sentences and we'll come back with how we'd tackle it. It's a conversation, not a sales pitch.