What is an evidence-based supply chain risk assessment?

An evidence-based supply chain risk assessment uses traceable information about suppliers, assets, controls and relationships to support its conclusions. Evidence may include contracts, questionnaires, certifications, incidents, technical observations and business data. It should show both the supplier’s posture and the organisation’s dependency. ThingsRecon contributes external evidence, supplier mapping and Digital Proximity, helping teams explain why a risk has been prioritised and what should happen next. In practice, teams should record the supporting evidence, confirm ownership and business criticality, and connect the finding to an accountable workflow. This prevents a useful observation from becoming another isolated score or dashboard alert. The strongest implementation combines external intelligence with internal knowledge, supplier engagement and documented risk decisions, creating a view that remains useful as the digital ecosystem changes.