Supply Chain Resilience in Asia: How to Audit Concentration Risk Before It Breaks Your Business

Supply Chain Resilience in Asia: What Founders Get Wrong Before the First Disruption

Most supply chain failures in Asian businesses are predictable. They are not caused by black swan events. They are caused by concentration risks that were visible on the balance sheet months or years before the disruption arrived.

We have worked with businesses across Sri Lanka, India, Bangladesh, and Southeast Asia where the supply chain looked robust on paper until a single supplier missed a shipment, a port closed, or a raw material price doubled. In every one of those cases, the warning signs were there. The business had simply never built a framework to read them.

This post lays out the frameworks we use when auditing supply chains for the businesses we back. It is not theoretical. It is the practitioner's version, built from what we have seen work and what we have watched fail.

---

Why Supply Chain Concentration Risk Is an Existential Threat for Asian SMEs

Single-supplier dependency is the most common and most dangerous supply chain failure pattern we encounter. When a business sources a critical input from one supplier, that supplier's problems become the business's problems with no buffer and no alternative.

This risk is structurally higher in South and Southeast Asia for a specific reason. Many markets in the region have shallow supplier ecosystems for specialised inputs. A manufacturer in Colombo sourcing a proprietary component may genuinely have limited alternatives. That scarcity makes the relationship feel stable. It is not. It makes the relationship fragile in a way that only becomes visible during a disruption.

The cost of building resilience into that relationship, whether through dual sourcing, safety stock, or contractual protections, is an insurance premium. Frame it that way in your board discussions. board reporting for operational risk The question is not whether the premium is worth paying. The question is whether the business can survive the event it is insuring against.

---

The Supplier Tiering Framework: Strategic Partners, Preferred Vendors, and Spot Suppliers

Not all suppliers deserve the same management attention. A tiering framework forces you to be explicit about which relationships are strategic and which are transactional.

How to Define Your Three Supplier Tiers

Strategic partners supply inputs that are critical to your product, difficult to substitute, or deeply embedded in your operations. These relationships require active investment: joint planning, shared forecasting, and in some cases equity participation or long-term contracts.

Preferred vendors supply important but substitutable inputs. You maintain the relationship because of reliability and pricing, but you have alternatives if needed. The management cadence is lighter, but you review performance quarterly and you know who your backup suppliers are.

Spot suppliers handle commodity inputs or overflow capacity. You transact on price. There is no relationship investment beyond basic commercial terms.

The tiering exercise is valuable not because of the categories themselves but because of what it reveals. Most businesses we audit discover they have been managing strategic-partner suppliers as if they were spot suppliers. They have no joint planning, no performance visibility, and no contractual protection on delivery timelines.

The Common Mistake: Choosing Suppliers on Cost Alone

Lowest-cost supplier selection without factoring lead time variability, quality defect rates, and relationship stability is the second most common failure pattern we see. The math looks compelling at the point of purchase. It stops looking compelling when a defect rate of two percent compounds across one hundred thousand units, or when a three-week lead time variability makes your production schedule unmanageable.

A Dhaka-based consumer goods manufacturer we advised had selected its primary packaging supplier on unit cost. The supplier's lead times varied by up to four weeks depending on their own upstream availability. That variability forced the manufacturer to carry excess finished goods inventory to buffer the uncertainty, effectively erasing the cost saving and adding working capital strain on top. working capital management for manufacturers

---

The Supply Chain Resilience Scorecard: Three Metrics That Matter

A resilience scorecard gives you a structured view of where your supply chain is exposed. We use three primary metrics when assessing the businesses we work with.

Lead Time Variability

Average lead time is a misleading metric. What matters is the distribution. A supplier with a 30-day average lead time and a 10-day standard deviation is a fundamentally different risk profile from a supplier with a 30-day average and a 2-day standard deviation.

Measure lead time variability for each of your Tier 1 and Tier 2 suppliers over a rolling 12-month period. Set thresholds. If a supplier's lead time variability exceeds your buffer stock capacity, either increase buffer stock or begin qualifying a backup supplier.

Supplier Concentration

Supplier concentration measures the share of a critical input sourced from a single supplier. A useful rule of thumb: no strategic input should have more than 70 percent concentration with a single supplier if there are alternatives in the market. Below 50 percent is better. procurement strategy for Asian manufacturers

For inputs where the supplier ecosystem is genuinely thin, as it often is in Sri Lanka and Bangladesh for specialised components, the response is different. You cannot always dual-source. In those cases, the mitigation moves to contractual protection, safety stock strategy, and in some situations, vertical integration.

Contingency Coverage

Contingency coverage asks: for each critical input, what is your response if your primary supplier fails to deliver for 30, 60, or 90 days? Do you have a qualified backup supplier? Do you have safety stock? Do you have a product reformulation or substitution path?

Scoring each critical input against these three metrics gives you a heat map of your supply chain exposure. The inputs that score poorly on all three are your existential risks. Address those first.

---

How MAS Holdings and Mamaearth Used Vertical Integration to Build Supply Chain Strength

Vertical integration is not always the right answer to supply chain vulnerability. But for businesses with sufficient scale, it is often the most durable one.

MAS Holdings: Vertical Integration as a Competitive Moat

MAS Holdings, the Sri Lankan apparel manufacturer, built a vertically integrated supply chain from fabric production through to finished garment over decades of deliberate investment. The result is a business that controls its input quality, its cost structure, and its delivery reliability in ways that a pure cut-make-trim operation cannot.

That integration was not cheap and it was not fast. It required capital allocation decisions that looked expensive in the short term. What it created was a supply chain that is structurally more resilient than competitors who depend on external fabric suppliers, and a cost position that improves as volume scales. MAS is now a global benchmark for apparel supply chain management, built from Colombo outward.

Mamaearth: Staged Integration as Volume Grows

Maraearth, the Indian direct-to-consumer personal care brand, began operations with 100 percent third-party manufacturing. As volume grew and the brand scaled, the concentration risk of full outsourcing became a strategic liability. Mamaearth progressively shifted toward partial in-house production, reducing supply risk and improving margin in parallel.

The lesson is not that in-house production is always superior. It is that the right integration strategy changes as the business scales. At early volume, third-party manufacturing preserves capital and flexibility. At higher volume, the economics and the risk profile both argue for greater control.

For founders and operators across South Asia running businesses at the inflection point between these two stages, the question to ask is: what does my supply chain need to look like at three times my current volume? Build toward that answer now. scaling operations in South Asia

---

How to Run a Supply Chain Concentration Audit

A concentration audit does not require sophisticated tooling. It requires disciplined data collection and honest assessment.

Step One: Map Every Critical Input

List every input that, if unavailable for 30 days, would halt production or meaningfully degrade product quality. This is your critical input register. Most businesses have between 5 and 15 items on this list.

Step Two: Score Each Input Against the Resilience Scorecard

For each critical input, score it on lead time variability, supplier concentration, and contingency coverage. Use a simple red-amber-green rating. The inputs that score red on two or more dimensions are your priority risks.

Step Three: Build a Mitigation Plan for Each Red-Rated Input

Mitigation options include dual sourcing, increased safety stock, long-term supply contracts with penalty clauses, supplier development support, or vertical integration. The right option depends on the specific input, the supplier ecosystem, and your capital position.

A Sri Lankan logistics firm we advised ran this audit and discovered that three of its seven critical inputs were single-sourced with no backup and less than two weeks of safety stock. Two of those inputs had lead times of six to eight weeks from overseas suppliers. The exposure was significant and entirely invisible until the audit surfaced it.

Step Four: Review Quarterly

A supply chain audit is not a one-time exercise. Supplier ecosystems change. Your volume changes. New inputs become critical as your product evolves. Build a quarterly review cadence into your operations rhythm. quarterly operational review frameworks

---

FAQ: Supply Chain Resilience for Asian Businesses

What is supplier concentration risk and why does it matter?

Supplier concentration risk is the degree to which your business depends on a single supplier for a critical input. It matters because any disruption to that supplier, whether from financial distress, logistics failure, or geopolitical factors, directly disrupts your operations with no alternative path. In Asian markets where supplier ecosystems can be shallow, this risk is often higher than founders realise.

How do you build supply chain resilience without increasing costs significantly?

Resilience does not always require dual sourcing or large safety stock investments. Start by auditing which inputs are genuinely critical and which are easily substituted. For substitutable inputs, resilience comes from supplier relationships and fast qualification processes, not inventory. For truly critical inputs, the cost of resilience measures should be weighed against the cost of a 30-day supply disruption. In most cases, the insurance premium is worth paying.

When should an Asian business consider vertical integration?

Vertical integration makes sense when three conditions align: the business has sufficient volume to absorb fixed costs, the supplier ecosystem is too thin or unreliable to support the required service level, and the integration can deliver a durable cost or quality advantage. MAS Holdings is the regional benchmark. For earlier-stage businesses, staged integration as volume grows is the more capital-efficient path.

What is a supply chain resilience scorecard?

A supply chain resilience scorecard is a structured assessment of your supply chain's exposure to disruption. It typically measures lead time variability across key suppliers, supplier concentration for critical inputs, and contingency coverage in the event of a primary supplier failure. Scored regularly, it gives leadership a clear view of where the supply chain is fragile and where investment in resilience is most needed.

---

The Bottom Line: Your Supply Chain Will Be Audited. Do It Yourself First.

Every supply chain gets stress-tested eventually. The variable is whether the stress test is one you designed and ran on your own terms, or one imposed on you by a disruption you did not see coming.

The businesses we back that manage supply chain risk well share one characteristic: they treat resilience as a standing agenda item, not a crisis response. They tier their suppliers, they score their exposures, and they build contingency coverage for the inputs that matter most.

Your supply chain is only as strong as its weakest single point of failure. The time to find that point is before a disruption finds it for you.