Critical suppliers
Prioritize suppliers based on the activities and services they enable, not merely annual spend.
Concentration
Two contracted suppliers may still depend on the same manufacturer, carrier, cloud provider or region.
Contract and evidence
Recovery commitments, notification expectations, testing evidence and exit arrangements can be considered during procurement.
Alternatives
Substitute suppliers, stock buffers, alternate specifications and internal workarounds all have costs and lead times that should be understood before disruption.
Business continuity is organization-specific. Recovery priorities, legal duties, safety requirements, contracts, insurance terms and technical recovery methods should be validated by the responsible people in the organization.