How to Analyze a Company's Supply Chain Risk Using Public Disclosures

Supply chain risk used to be something analysts skimmed on the way to the income statement. A few years of port backlogs, chip shortages, and rerouted shipping lanes changed that. When a sole supplier goes down or a key shipping lane closes, the damage shows up in revenue and margins within a quarter or two, and the warning signs were usually sitting in the filings the whole time.

You can't tour a supplier's factory from your desk. What you can do is pull a surprising amount of supply chain intelligence out of documents public companies are required to publish, plus a few they publish voluntarily. Here's where that information lives and how I'd turn it into a usable view on risk.

Where Supply Chain Information Hides in a 10-K

There is no section of the 10-K labeled supply chain. The relevant material is scattered across four or five places, so it helps to know exactly where to look when you open a filing on EDGAR.

Item 1, the business description. This is where companies discuss raw materials, manufacturing, and distribution. Search the document for phrases like "single source," "sole supplier," "limited number of suppliers," and "concentration." Companies tend to bury these admissions mid-paragraph, and a text search surfaces them in seconds.

Item 1A, risk factors. Every company lists supply chain risks here, which is exactly the problem. The generic language ("we depend on third parties for certain materials") tells you nothing. What you want are the specifics: a named country of manufacture, a component with one qualified vendor, a reference to a past disruption and what it cost. When a risk factor gets more detailed from one year to the next, that usually means something happened or management is worried it will. Comparing this year's risk factors against last year's is one of the highest-yield exercises in filing analysis, and it takes about twenty minutes.

Item 2, properties. Often ignored, but it lists the company's principal facilities and where they sit. If every plant is in one region, you've just learned something Item 1A may have soft-pedaled.

Item 7, the MD&A. Management has to explain what actually moved results during the year. Look for discussion of input costs, freight, sourcing challenges, and inventory decisions. If gross margin fell and the MD&A attributes it to elevated logistics costs, you now have a supply chain problem quantified in margin points.

The inventory footnote. The notes to the financial statements break inventory into raw materials, work in progress, and finished goods. More on this below, because it's the closest thing to a real-time supply chain signal in the financials.

One more source worth setting an alert for is the 8-K. Material disruptions, like a fire at a key plant or a supplier bankruptcy, often show up in an 8-K months before they get woven into the annual report narrative.

Supplier Concentration

Concentration is the risk I check first, because it's binary in a way most risks aren't. If a company sources a critical component from one supplier and that supplier fails, production stops, and there's no partial version of that outcome.

There's an asymmetry in the disclosure rules worth knowing. Companies have to disclose when a single customer accounts for 10% or more of revenue, but there is no equivalent bright-line rule for suppliers. Supplier disclosure comes down to materiality judgment, so quality varies enormously from company to company. Some name their key vendors outright. Others just gesture at "a limited number of qualified suppliers." When the language stays vague year after year, treat that as a data point in itself.

Two follow-ups when you do find a concentrated relationship. First, check whether the supplier is public. If it is, read its filings too. You'll sometimes discover the supplier has its own concentration problem, or that your company shows up as one of its major customers, which cuts both ways: the relationship is stickier, but each party's problems become the other's. Second, look at relative size. A company that represents a meaningful share of its supplier's revenue gets leverage and priority during shortages. A small customer of a dominant supplier gets neither.

Geographic Concentration

Where the supply chain physically sits matters as much as who runs it. A supplier base spread across one earthquake zone, one strait, or one customs regime is a single point of failure dressed up as diversification.

Combine three sources here. The properties list in Item 2 gives you owned and leased facilities. Item 1 and the risk factors usually indicate where third-party manufacturing happens, which matters most for companies that outsource production entirely. And for hardware, apparel, and consumer goods companies, import records fill the gaps. US ocean import manifests are public records, and several commercial services index them by company, so you can often see which ports, shippers, and origin countries a company actually depends on.

Layer trade policy on top of the map. Tariffs and export controls can reprice or block a supply line quickly, and companies with heavy exposure to countries involved in trade disputes are supposed to flag it in the risk factors. Also useful: companies whose products contain tin, tantalum, tungsten, or gold file a Form SD conflict minerals disclosure, which sometimes reveals sourcing geography you won't find anywhere else in the filings.

Reading the Inventory Footnote

Inventory is where supply chain stress shows up in the numbers first, often a few quarters before it reaches the income statement. The balance sheet gives you the total. The footnote gives you the composition, and the composition carries most of the signal.

Here's a worked example with made-up numbers. Say a company reports revenue up 5% year over year but total inventory up 30%. On its own that's ambiguous. Now open the footnote and suppose raw materials are up 60%, work in progress is flat, and finished goods are up 5%. That pattern says the company is stockpiling inputs, which usually means management is worried about supply availability or is front-running expected cost increases. Flip the mix, with finished goods up 60% while raw materials stay flat, and the story becomes softening demand: product is being made and then sitting on the shelf. Same total inventory growth, opposite problems, and only the footnote tells you which one you have.

The MD&A will usually confirm or contradict your read. Managements that are deliberately building buffer stock tend to say so, because it explains an ugly balance sheet. Silence around a big inventory build is the more worrying version.

Watch write-downs too. Inventory is carried at the lower of cost and net realizable value, so when a company can't sell what it made or use what it bought, it takes a charge, usually through cost of goods sold. One write-down after a demand shock is normal. Write-downs that recur across several years point to a planning problem, either in forecasting demand or in matching purchasing to it.

The Cash Conversion Cycle

If you want one number that summarizes supply chain health, the cash conversion cycle is the best candidate in the standard financials. It measures how many days pass between paying suppliers and collecting cash from customers, and it's built from three pieces: days inventory outstanding plus days sales outstanding minus days payables outstanding.

Direction matters more than level here. A cycle that lengthens over several quarters means cash is getting stuck somewhere, and the components tell you where. Rising days inventory means product is sitting longer. Rising days sales outstanding means customers are paying slower, which is more of a demand signal than a supply one. Shrinking days payables means suppliers are demanding faster payment, and that sometimes means they've lost confidence in the buyer.

Level matters when you compare against peers in the same industry, since inventory intensity varies too much across industries for absolute comparisons to mean anything. A distributor and a software company will never have comparable cycles, but two auto parts suppliers should, and a persistent gap between them is worth investigating.

One newer wrinkle helps here. Companies used to be able to stretch payables invisibly through supplier finance programs, where a bank pays the supplier early and the company pays the bank later. Under ASU 2022-04, companies now have to disclose the outstanding size of these programs in the footnotes. If days payables look impressively long, check for that disclosure before crediting management with negotiating skill.

Earnings Calls and Voluntary Disclosures

Filings are written by lawyers, so the language is defensive by design. Earnings calls, especially the Q&A, are where you hear how management actually thinks about its supply chain, because analysts ask directly about disruptions, input costs, and sourcing. Transcripts are freely available from several sources, and companies post the audio on their investor relations pages.

Three things to listen for. Whether management frames supply problems as resolved, ongoing, or worsening, and whether that framing has drifted over consecutive quarters. Whether cost increases are being passed through to customers or absorbed into margin, which the CFO will usually address when asked. And whether resilience spending is specific (a named second source, a new plant location, a qualification timeline) or stays at the level of "we continue to diversify our supply base."

Beyond the calls, sustainability and supplier responsibility reports have quietly become useful. They often include supplier counts, audit results, and sourcing geographies that never appear in the 10-K. A few large companies, Apple among them, go as far as publishing supplier lists. None of this is audited the way financial statements are, so treat it as directional, but directional beats blank.

Putting It Together: A Simple Scoring Pass

When I want a structured view instead of a pile of notes, I score a company on six dimensions, each drawn from the sources above:

• Supplier concentration. Any single-source or sole-supplier language in Item 1 or 1A? Any named dependencies?
• Geographic concentration. How many countries and regions does production actually span, based on Item 2 and import data?
• Inventory health. Is inventory growth tracking revenue growth, and does the footnote mix look intentional?
• Working capital trend. Is the cash conversion cycle stable or improving against its own history and against peers?
• Management candor. Does management discuss supply risk specifically, with named mitigation steps, or only in boilerplate?
• Track record. How did the company hold up during the last industry-wide disruption compared with its competitors?

A simple one-to-five score on each dimension is enough. The value is in the forced coverage, because scoring everything stops you from anchoring on whichever risk happens to be in the news that week.

Then repeat the pass quarterly. Supply chain risk moves with each 10-Q inventory footnote and each earnings call, and companies drifting toward trouble usually telegraph it across two or three filings before it lands in the income statement. Keep even rough notes on these six dimensions and you'll notice the drift while there's still time to act on it.