Supply-chain resilience is now an economic-security issue

< Back to Insights

For a long time, companies treated supply-chain risk as a logistics problem: delays, shortages, freight costs, and the occasional supplier failure. That view is too small now. Geopolitical tensions, trade fragmentation, sanctions, export controls, and strategic competition are increasingly shaping whether organizations can source, move, insure, and deliver critical goods at all.

The Dutch National Cyber Security Centre (NCSC-NL) is explicit that geopolitical developments can create new supply-chain risks and make organizations dependent on suppliers in politically unstable regions. Its guidance also stresses the importance of knowing where suppliers are based, who owns them, and whether geopolitical developments or sanctions could disrupt the chain. That is a much broader picture than cybersecurity alone: it is about exposure, concentration, and hidden dependencies.

This is not a theoretical warning. The World Economic Forum’s 2026 Global Risks Report ranks geoeconomic confrontation among the leading global risks, alongside interstate conflict and extreme weather. EY’s 2026 geostrategic outlook says governments are still pushing de-risking and onshoring in sectors they consider strategic, which means companies need to expect more policy intervention in sourcing decisions, cross-border flows, and industrial policy. In other words, supply chains are being pulled into state strategy.

That has direct business consequences. When a government treats a sector as strategic, it may encourage localization, screening, export restrictions, or substitution away from risky suppliers. That can improve resilience in one lane while making life harder in another, because companies then need to redesign sourcing, inventory, and contracting around political risk rather than just cost and efficiency.

The most honest lesson is that supply-chain resilience is now partly about intelligence. Organizations need to know not only who their suppliers are, but where they sit in the chain, which countries they depend on, what parent companies or shareholders are involved, and which alternative suppliers exist. If that sounds like due diligence, it is. ICC Netherlands has been blunt that geopolitics is back in the boardroom, and that due diligence is one of the best tools available for mapping dependencies and reducing surprises.

That matters because many of the biggest shocks no longer come from a single failed shipment. They come from the combination of tariffs, sanctions, instability, rerouting, regulatory friction, and supplier concentration. PwC’s supply-chain work has shown that geopolitical tensions already increase pressure on transport costs and supply chains, and trade disruption can quickly feed into pricing and planning. If you are sourcing globally, you are not just buying goods. You are also buying exposure.

The practical response is not to abandon global trade. That would be unrealistic for most organizations. The smarter move is to map where the real choke points are, identify which dependencies are strategic rather than incidental, and decide where you need redundancy, regionalization, stock buffers, or supplier substitution. That is how resilience becomes operational, not aspirational.

A strong supply-chain program should now answer five basic questions.

  • Which suppliers are in politically sensitive jurisdictions?

  • Which products or services have no realistic second source?

  • Where do sanctions, export controls, or trade restrictions hit fastest?

  • What can be rerouted or substituted within weeks, not years? and

  • What happens to customers if the chain breaks at the wrong point ?

The brutally honest part is that many organizations still do not know the answers. They have procurement data, maybe some vendor risk registers, and a few continuity plans, but not the clear chain visibility needed for a world where geopolitics can move faster than quarterly planning. That gap is becoming expensive.

Why this matters

If supply chains are now part of economic security, then resilience is no longer a back-office topic. It is a board-level issue that affects revenue, compliance, margins, customer trust, and strategic autonomy. Organizations that treat this as a purely operational problem will miss the fact that governments are increasingly shaping the environment in which those operations happen.

For business leaders, the message is blunt: resilience now starts with visibility. If you cannot explain where your dependencies are, why they matter, and how you would cope if one region, one route, or one supplier failed, then you are not managing supply-chain risk: you are hoping it stays quiet.

Practical steps

Start with supplier mapping and country exposure. Then go deeper into ownership, subcontractors, logistics routes, and single points of failure. After that, run scenario planning for sanctions, tariffs, route disruption, and supplier loss, and test whether your procurement and operations teams can switch fast enough to matter.

The goal is not to eliminate every dependency. That is impossible. The goal is to know which dependencies are acceptable, which are dangerous, and which require a backup plan before the world makes the decision for you.

Forculus can help organizations turn geopolitics into a concrete supply-chain resilience program by mapping exposure, identifying politically sensitive dependencies, and translating due diligence into action across procurement, operations, and continuity planning.

Pro tip: do not wait for a sanction, tariff shock, or supplier failure to reveal your weak links; map the chain now, test the alternatives now, and build resilience before the next geopolitical move arrives.


< Back to Insights

Next
Next

You Can Buy IT, Not Responsibility