Concentration Risk

Definition

Concentration Risk is the exposure that arises when a material share of spend, supply, production capacity, business volume, or operational dependency is concentrated in too few suppliers, customers, sites, geographies, or counterparties, making disruption or failure disproportionately damaging.

What is Concentration Risk?

Concentration risk exists when dependency is not sufficiently diversified for the level of criticality involved. In procurement, the most common form is supplier concentration, where a category, component, or service is heavily dependent on one supplier or a small number of suppliers. However, the risk can also arise from overreliance on one manufacturing site, one logistics route, one country of origin, one commodity source, or one customer channel.

The issue is not concentration by itself. Some concentration is commercially rational and may reflect scale efficiencies, technical qualification limits, or strategic partnerships. The risk emerges when the organization would suffer severe cost, service, or continuity consequences if the concentrated dependency were impaired.

Concentration risk therefore combines exposure size with replaceability. A single-source arrangement for a non-critical, easily substitutable item may be acceptable, while a similar concentration in a qualified direct material can be a major enterprise risk.

How Concentration Risk is Assessed

Assessment begins by identifying the relevant unit of concentration. Procurement may analyze annual spend share by supplier, volume share by source, dependency by manufacturing site, or regional exposure by country. The analysis should then be paired with criticality, switching difficulty, inventory buffers, contractual protections, and time to recover.

A spend share percentage alone is not enough. Two suppliers may each represent 40 percent of spend, yet one may be easy to replace and the other may be embedded in regulated products, specialized tooling, or long qualification cycles. Concentration risk is therefore a structural dependency assessment, not just a Pareto chart.

Methods for Measuring Concentration Risk

Organizations often use simple supplier share analysis, but more advanced approaches include the Herfindahl-Hirschman Index, single-point-of-failure mapping, and scenario-based disruption testing. The Herfindahl-Hirschman Index sums the squared market shares or dependency shares of the sources under review, producing a value that rises as concentration increases.

For example, if a category is sourced 70 percent from one supplier and 30 percent from another, the concentration index using share squares would be 0.58. If the same category were divided evenly across four suppliers at 25 percent each, the index would be 0.25. The higher figure indicates materially greater concentration.

Concentration Risk in Procurement

In procurement, concentration risk affects continuity, negotiating leverage, and resilience. Heavy dependency on a single supplier can reduce price tension, increase switching cost, and expose the buyer to outages caused by financial distress, capacity shortages, quality failures, cyber incidents, labor disputes, or geopolitical events. Multi-tier supply chain exposure can make the risk even larger than first-tier data suggests.

Procurement teams therefore monitor not only first-tier supplier concentration but also whether multiple approved suppliers are in fact reliant on the same sub-tier source, region, or logistics corridor.

Managing Concentration Risk

Risk mitigation depends on the nature of the dependency. Common responses include dual sourcing, regional diversification, safety-stock redesign, tooling transfer planning, supplier development, contract provisions for continuity, and earlier visibility into capacity or financial stress. In some cases, concentration is accepted because the technical or commercial alternatives are weaker, but the organization should then document the rationale and strengthen contingency planning.

Effective management requires periodic review because concentration can increase gradually through acquisitions, supplier exits, performance issues at smaller sources, or demand growth that outpaces supply development.

Frequently Asked Questions about Concentration Risk

Is concentration risk the same as single sourcing?

No. Single sourcing is one specific sourcing model in which one supplier is intentionally awarded the business. Concentration risk is broader and can exist even when more than one supplier is approved. For example, two suppliers may both depend on the same sub-tier manufacturer or operate in the same disruption-prone region. Single sourcing often creates concentration risk, but concentration analysis must look beyond the number of direct suppliers on paper.

Can concentration ever be a good strategy?

Yes, in some contexts concentration is commercially sensible. Consolidating demand with a strong supplier can improve scale pricing, technical collaboration, quality consistency, and governance simplicity. The question is not whether concentration exists, but whether the resulting dependency is understood and acceptable relative to the consequences of failure. Good procurement practice treats concentration as a strategic choice that requires explicit risk evaluation, not as an accidental by-product of buying history.

How can procurement quantify concentration risk?

Procurement can quantify it through supplier share of spend or volume, dependency on critical sites, country exposure, inventory cover, time to recover, qualification lead time, and more formal indices such as the Herfindahl-Hirschman Index. Quantification becomes more meaningful when paired with scenario testing. A category that looks concentrated may still be manageable if switching is fast, while moderate concentration can be dangerous if recovery would take months.

What is the main mistake companies make with concentration risk?

The main mistake is equating approved supplier count with real resilience. Organizations sometimes assume that having two or three contracted suppliers means the risk is diversified, even though those suppliers may share the same upstream dependencies, logistics routes, or raw-material exposure. Another common error is reviewing concentration only annually, which misses gradual dependency shifts caused by operational convenience, supplier failures, or demand growth concentrated in one source.