Supply Chain Risk Management: Competing In the Age of Disruption (Cerm Academy Enterprise Risk Management)

A single missing shipment of microchips can halt car production worldwide. A single hacked supplier can compromise an entire enterprise. In today’s fragile, interconnected economy, supply chain risk isn’t just a logistics problem — it’s a survival issue. Third Party Risk Management becomes hugely more important.

Supply Chain Risk Management gives you the frameworks, tools, and real-world strategies to identify vulnerabilities before they strike, adapt faster than competitors, and turn risk into a competitive advantage. This book is your roadmap to building resilience when it matters most.

Supply Chain Risk Management: Competing in the Age of Disruption is the first comprehensive (450 pages) playbook addressing the modern VUCA (Volatility, Uncertainty, Complexity, Ambiguity). Geopolitical instability, China visibility, regulatory challenges, and tariffs are shaking global supply networks. Reliance on single-source suppliers or critical offshore chokepoints increase risks that cascade into systemic supply chain. disruption.

Supply Chain Risk Management: Competing in the Age of Disruption is built on the ISO 31000 risk framework. This book offers 35 strategies to forecast and manage supply risk. This book offers the following options for starting a SCRM program, specifically:

• Use ISO 31000 or similar risk management framework to start, design, deploy, and assure a SCRM program.
• Use a project based approach to start or mature a SCRM program.
• Use a supply certification approach to start or mature a SCRM program.
• Use operational excellence tools approach to start or mature a SCRM program.

Supply Chain Risk Management: Competing in the Age of Disruption provides the following value adds:

• Explain why Risk Based Problem Solving (RBPS) and Risk Based Decision Making (RBDM) are the future of SCRM. Examples are offered throughout the book.
• Describe how to select and develop suppliers based on risk criteria.
• Demonstrate how to use ISO 31000 risk management framework as the foundation and architecture for SCRM.
• Illustrate how supply chain risk-controls are architected, designed, deployed, and assured.
• Prepare supply chain, quality, engineering, and operational excellence professionals for their emerging risk roles, responsibilities, and authorities.
• Illustrate how supply chain management is migrating to Supply Chain Risk Management (SCRM).
• Demonstrate how SCRM objectives align with the organization’s strategic business objectives.
• Describe how to move beyond a price focused relationship to a value-added relationship with suppliers based on risk.
• Integrate the disparate elements of SCRM into a competitive business system.

Risk Management is #1 Challenge Facing Supply Team
Risk management is the biggest issue for supply management teams right now and feeds directly into the success of supply chains. As well, supply management is moving from a transactional and product based business model to an integrated Supply Chain Risk Management model, which is abbreviated as SCRM throughout this book.

This book provides specific guidelines for architecting, designing, deploying, and assuring the adequacy and effectiveness of supply chain risk-controls. The book provides general scenarios, approaches, processes, best practices, and tools that have worked well with our clients and other organizations.

Who is Greg Hutchins PE CERM
Who is Greg Hutchins PE CERM. Greg is a professional engineer. Greg has managed billion dollar supply chains. He is the author of the ISO 31000: Enterprise Risk Management and Supply Management Strategies.

Greg Hutchins PE CERM is the founder of: + 800Compete.com. + WorkingIt.com. + CERMAcademy.com. + QualityPlusEngineering.com, and other startups. + CERMAcademy.com. Greg Hutchins is the risk evangelist who coined the expression Future of Quality: Risk(R). He is the founder of Certified Enterprise Risk Manager Academy(R). He can be contacted at GregH@europa.com or 503.233.1012. Greg is the founder of Working It Academy and the author of Working It: Disruption Rules. Greg Hutchins PE CERM is also the principal professional engineer Quality + Engineering - international supply and quality management firm. Q+E is the designer and developer of Certified Enterprise Risk Manager(R) (CERM), CERM Cyber(TM) certificate, and best-selling ISO and ERM books. Q+E has deep domain expertise in ISO 31000, ISO 27001, and NIST 800's. Q+E designed CERM based on its security IP including Critical Infrastructure Protection: Forensics, Assurance, Analytics(R); Value Added Auditing(TM); Certified Enterprise Risk Manager(R); Future of Quality: Risk(R); CERM: Risk Based, Problem Solving Risk Based, Decision Making(R); etc. Q+E has been certified by the Department of Homeland Security for Critical Infrastructure Protection: Forensics, Assurance, Analytics(R). Q+E has conducted the following Critical Infrastructure Protection (CIP) risk assessments: + Analytical. Q+E engineers and scientists conduct analytical analyses following Q+E protocols evaluating business continuity, cyber security, and physical security systems against IEEE, NFPA, ISA, PMI, ISO, NIST, COSO, NERC, DIACAP, FISMA, and ASIS standards. + Assurance. Q+E offers the client three levels of assurance: + Compliance. Q+E conducts a compliance audit against appropriate standards and guidance. + Assurance with opinion. Q+E issues an opinion based on the results of a governance, risk, and compliance (GRC) audit or ERM controls assessment. + Assurance with insurance coverage. Q+E conducts an audit and provides the requisite level of due diligence for the auditee to be covered. + Forensics. Q+E provides the above levels of assurance as well as supplies a letter to the regulatory authority averring compliance that criteria have been met. Our ISO background includes: Was lead trainer and consultant for first US based certification body in 1987 (AGA Laboratories). Was member of US TAG in 1987 - developer of ISO 9001 Consulted and trained FAA in risk-based auditing, certification, etc.