SITREP
70% of small business owners told NFIB in May 2026 that supply chain disruptions had affected their operation. It jumped 6 points in one month. Most owners read that statistic and picture a late truck or a delayed shipment. The real exposure sits one full layer beneath logistics, hidden inside the supplier list you built yourself. You cannot see it on a dashboard.
You assembled that list over years of ordinary, perfectly sensible decisions. One vendor supplies the component that actually matters. A single co-packer understands your formulation, your labels, and your entire seasonal production calendar by heart. One distributor quietly sets the pricing you stopped auditing. The arrangement feels permanent and immovable. In reality it is a concentration of operational risk you never once deliberately priced.
This brief names the trap precisely. When a single supplier carries too much of your production, you do not own a vendor relationship at all. You own a dependency. Ahead, you get a map of the three hiding places and a clean three-protocol audit. The gap is not the disruption. The gap is that you cannot name your backup.
What the Research Really Says
Start with one genuinely simple question about your own operation today. What are you doing about supplier concentration? Almost nothing. For most owners, the honest and uncomfortable answer is that the numbers never actually get calculated.
The Federal Reserve’s 2026 Small Business Credit Survey paints a stark picture. 48% of small firms source at least some inputs from abroad, and 14% rely on foreign suppliers for over half. The cost pressure was undeniable. Prices on those imported inputs climbed for a clear majority of those firms last year.
Here is the genuinely alarming part. Only 13% of these firms switched to a domestic supplier. Just 8% found a different foreign source, and a bare 3% relocated production home entirely. Owners quietly absorbed the additional cost. They never once touched the underlying dependency that caused the pain.
That single distinction is the entire gap. You can pass a price increase along to your customers without much drama at all. A supplier who simply stops shipping is a different animal entirely.
The disruption itself is no longer uncommon. NFIB reported that 70% of owners felt supply chain disruption in May 2026, up 6 points from April. The insurance industry observes the identical signal.
Allianz now ranks business interruption, including supply chain disruption, as the third largest commercial risk on earth. Only 3% of companies consider their own supply chains very resilient. Read that figure twice. 3%.
The cost pressure underneath all of this is measurable and current. The Bureau of Labor Statistics reported producer prices for final demand rose 6.0% in the year ending April 2026. That is the steepest climb since 2022.
Resilinc logged a 38% rise in global disruptions last year alone. Factory fires led every category. They have ranked as the number one cause for six straight years now. When the one irreplaceable supplier in your whole business is the plant that burns down, loyalty buys you nothing.
What Owners on the Ground Are Saying
The trap looks different at every tier. Listen closely to how three different owners describe the very same blind spot in their own plain words. None of them saw it coming.
A $3M specialty food maker put it plainly: “We have used the same co-packer for 11 years. They know our recipe and our timing cold. I never wrote down what happens if they go dark, because I never believed they would.” That is comfort built on history, with no contingency underneath. The plan never existed.
A $9M mechanical contractor described a sharper version: “I knew one distributor handled most of our parts. I did not know the number was 60% of everything we purchase. We finally ran the real figures only after a three-week shortage stalled two active jobs and lost a referral.” His problem was never the vendor. It was a number he had simply never calculated, sitting in plain sight on his own books.
A $24M consumer brand owner described the most dangerous variant of all: “Everything we sell ships from one overseas factory. Standing up a real backup takes long months.” When the factory’s lead times doubled overnight, she had no qualified second source anywhere. She needed product last quarter, badly. Paper alternates do not fill real customer orders at scale.
Notice what unites all three. None of these owners was careless, lazy, or unusually exposed by the standards of their industry. Each simply mistook a long relationship for a safe one. A quiet supplier and a replaceable one are not the same thing at all.
Three businesses, three tiers, one blind spot wearing three different disguises.
How This Plays Out in the Field
Picture a $14M industrial parts distributor anchored in the Midwest. One supplier filled 55% of its inventory. The owner had cultivated that one relationship patiently over nine steady and genuinely profitable years. On paper, it looked like a flawless, textbook partnership. Nothing about it felt risky.
Before: The business ran lean and reliably profitable. Inventory turned on a steady, predictable rhythm every single month of the year. The owner knew the supplier’s sales rep by name. He golfed with the man every quarter and trusted the handshake without a flicker of doubt. No written backup plan existed. It had simply never seemed worth the trouble. The concentration looked exactly like loyalty, and loyalty always felt safe.
Actions: A fire tore through the supplier’s primary plant in March. Shipments stopped cold for 14 weeks. The distributor scrambled to source from three replacement vendors at punishing spot-market pricing. Expedited freight alone consumed $214,000. Premium part pricing added another $137,000 across the brutal quarter. Two of the company’s largest accounts, worn thin by chronic backorders, defected to a competitor and erased $890,000 in annual revenue. Customers do not wait politely for backorders to clear. The owner drained the reserve and drew $300,000 on a credit line just to keep product circulating.
After: The business survived, leaner and badly rattled. The owner qualified two backup suppliers and now splits volume across three separate sources deliberately. Qualifying one backup in advance would have cost roughly $8,000. That covers samples, testing, and paperwork. That modest $8,000 would have prevented more than $1.2M in costs and lost revenue. “I insured my trucks and my own health,” the owner said. “I never once insured my supply.” Most distributors across the country carry this exact exposure today and quietly call it a healthy partnership. The fire sent no warning.
The Operator’s Battle Plan
You cannot fix an exposure you have never measured. These three protocols convert a vague worry into a ranked, closeable list you can finish methodically. The goal is a register you can actually act on. Work them in strict order.
Protocol 1: Rank your suppliers by spend.
What: Open your accounts payable immediately. Export every supplier and the exact total you paid each one across the trailing 12 months. Then sort that entire list from largest spend to smallest. Use verified figures, not rough guesses.
Measure: Flag the dangerous suppliers now. Mark every vendor above 20% of your cost of goods, plus any input that arrives from one source. That flagged set becomes your real risk register.
Why: Owners rarely rank this exposure. The Federal Reserve found that only 13% of firms switched suppliers when their prices rose in 2026. Concentration survives almost entirely on simple, unexamined inertia.
Protocol 2: Run the 30-day replacement test.
What: Pose one blunt question. Take each flagged supplier and ask whether you could realistically replace them within 30 days. Imagine them going completely dark tomorrow morning.
Measure: Mark each name yes or no. Record the alternate vendor and its quoted lead time, in writing, for every single one. Every unanswered no is a single point of failure you now own.
Why: Hope is not a lead time. NFIB found that 70% of owners were hit by supply chain disruption in May 2026. Allianz says just 3% call their chains resilient.
Protocol 3: Qualify one backup for your top dependency.
What: Start with the worst one. Identify your single largest single-source risk from the register. Then contact a credible second source and request pricing, a sample, and specs this month.
Measure: Get it in writing. You want a named, quoted, and fully qualified alternate vendor for that single critical input. Not a friendly maybe over the phone.
Why: Resilinc documented a 38% surge in disruptions last year. Factory fires led the list. The backup you qualify in calm is the one that truly rescues you in real chaos. You will not have time to shop around mid-crisis.
Your Next 30-60 Days
Sequence genuinely matters here. You inventory first, you identify second, and you close last, strictly in that exact order. Rushing to bind a backup squanders money. Worse, it usually ends up closing the entirely wrong gap.
Phase 1, Week 1: Inventory your dependencies.
Pull your accounts payable for the trailing 12 months and rank every supplier by spend. Mark which inputs flow from a single, irreplaceable source. Do not solve anything yet. You are building the map here, not the remedy. By Friday, you should hold one ranked list and a short tally of single-source inputs. This single inventory is the foundation for every decision that follows it.
Phase 2, Weeks 2-4: Find and confirm the gap.
Take your top flagged suppliers and test each one hard against the 30-day replacement question. Call your three biggest single-source vendors immediately. Request their current lead times and capacity in writing, on the record, from each. You are confirming where the exposure sits. The output is a written gap list, ranked from worst to least severe. Written records separate a plan from a hope.
Phase 3, Weeks 5-8: Close your single biggest gap.
Choose the dependency that would hurt the most if it vanished overnight. Contact a credible second source this week. Request pricing, a sample, and a standby commitment in writing. One qualified backup, documented with a real quote and an activation date, closes your worst gap. Then you begin the subsequent one. Most owners feel a genuine weight lift once that initial backup is locked.
Why This Matters Now
The window is closing faster than most owners assume. Allianz reports that 49% of companies are already renegotiating and diversifying their supply chains. Your competitors are moving right now. The owners who wait become the ones caught flat when the next disruption finally lands. Half the market has already started moving without you.
Consider the broader signal carefully. Allianz Risk Barometer respondents named the most plausible severe shock of the coming five years. It is global supply chain paralysis from a geopolitical conflict. Fully 51% picked it. That ranking reflects the considered consensus of 3,338 risk professionals across 97 countries.
The conditions that fractured global supply chains in 2020 never fully reset afterward. Trade tension has only intensified considerably since then. If anything, the structural fragility today runs deeper than it did during the pandemic itself. The pressure is structural, not temporary.
You do not need to forecast the next fire, strike, or tariff. You need one thing only. Know which supplier you cannot replace, and hold a second name ready before you ever need it. That single piece of knowledge is your cheapest insurance this year.
Open your accounts payable this week and rank your top five suppliers by spend.