Plan a supply chain visibility project with a Gantt chart covering tier-1 to tier-3 supplier mapping, risk scoring, alternative qualification, and monitoring.
Most organizations know their tier-1 suppliers — the companies they write purchase orders to directly. Fewer know their tier-2 suppliers (who their tier-1 suppliers buy from). Almost none have visibility into tier-3 (the suppliers of their tier-2 suppliers). Yet the disruptions that made headlines in 2020–2022 — semiconductor shortages, port congestion, raw material scarcity — were tier-2 and tier-3 failures that propagated forward through supply chains that had no visibility into the problem until it arrived at their loading dock.
Supply chain mapping is the process of discovering, documenting, and risk-scoring your supply network beyond tier-1. It is a project with a defined scope, a structured methodology, and an ongoing monitoring phase. Without a Gantt chart to structure the work, supply chain mapping drifts: the tier-1 data collection takes twice as long as planned, tier-2 discovery never begins, and the risk scoring exercise produces a list but no action.
A Gantt chart for supply chain mapping makes each phase time-bounded, assigns ownership, and connects the discovery work to the risk mitigation actions that make the investment valuable.
Mapping scope definition — supply chain mapping cannot begin without defined scope boundaries. Decisions to make:
Internal stakeholder engagement — supply chain mapping requires data from multiple functions: procurement (supplier contracts and spend data), operations (production bill of materials), engineering (approved supplier lists), legal (supplier contract terms including flow-down clauses), and finance (insurance and business interruption coverage). Align each function on what they will contribute before data collection begins.
Mapping methodology selection — two primary approaches:
For organizations with complex supply chains in high-risk categories, a platform approach is worth the investment. For simpler supply chains, structured questionnaires with active follow-up can achieve adequate coverage.
Supplier master data review — start with your ERP or procurement system's supplier master file. Clean the data: remove duplicates, consolidate related entities (e.g., multiple sites of the same parent company), and confirm contact information is current. For most organizations, 20–30% of the supplier master file contains stale or inaccurate data.
Spend analysis — run a spend-by-supplier analysis to identify your top 80% spend concentration. In most supply chains, 10–20% of suppliers account for 80% of spend. Prioritize these suppliers for comprehensive mapping; apply lighter-touch approaches to the long tail.
Tier-1 data collection questionnaire — design a structured questionnaire covering:
Questionnaire distribution and follow-up — distribute questionnaires to the designated contact at each tier-1 supplier. Set a 2-week response deadline. Assign a procurement analyst to follow up weekly with non-respondents. For strategic suppliers, a phone call or video meeting from the procurement director is more effective than email.
Data validation — do not accept supplier self-reported data without validation. Cross-reference location data against satellite imagery (Google Maps, Bing Maps) for major facilities. Verify certifications against the certifying body's public registry.
Tier-2 discovery methodology — tier-2 supplier discovery requires one of three approaches:
Supplier flow-down: require tier-1 suppliers (via contract clause or supplier code of conduct) to complete the same questionnaire about their own suppliers. Effective when you have contractual leverage; unreliable when suppliers resist disclosure of their supply network (treating it as proprietary).
BOM-driven discovery: use your bill of materials to identify specific component categories and raw materials, then work with engineering and procurement to identify the known or likely suppliers of those materials. Focus on the highest-risk material categories first.
Supply chain intelligence platforms: platforms like Resilinc and Everstream use proprietary databases of supplier relationships to algorithmically map tier-2 and tier-3 networks based on known industry supplier relationships. Coverage is not 100%, but these platforms can reveal tier-2 dependencies in weeks that would take months to discover through manual questionnaires.
Single-source dependency identification — as tier-2 data is collected, flag every instance where a critical component or material has only one known supplier globally (or one supplier in a concentrated geography). These are your highest-risk nodes and require immediate attention.
Risk data sources — overlay each mapped supplier location with external risk data:
Risk concentration analysis — calculate the percentage of your supply base (by spend and by critical component count) concentrated in each high-risk geography. Common findings that surprise organizations:
Single-source dependency prioritization — not all single-source dependencies are equally critical. Prioritize for mitigation by impact:
Alternative supplier identification — for each high-impact single-source dependency, identify 2–3 potential alternative suppliers. Sources: industry directories, trade associations, commodity brokers, procurement intelligence platforms (Panjiva, ImportGenius, Kompass).
Alternative supplier qualification — qualification of a new supplier involves: supplier quality audit (on-site or remote), product sampling and testing, first article inspection, and commercial terms negotiation. Budget 3–6 months per qualification for complex components. Plot every qualification project on the Gantt with its own timeline.
Dual-source strategy — for critical components, establish a formal dual-source policy: primary supplier receives 70–80% of the volume, secondary supplier receives 20–30%. The secondary supplier remains qualified, commercially active, and capable of scaling rapidly if the primary supplier is disrupted.
SCOR framework application — the Supply Chain Operations Reference (SCOR) framework provides a standardized methodology for supply chain performance measurement that can be adapted for risk scoring. Apply SCOR-based metrics: supply chain reliability, responsiveness (lead time), agility (ability to respond to disruption), costs, and asset management efficiency.
Composite risk score — develop a composite risk score for each supplier node combining:
Map risk scores visually on a heat map (probability on one axis, impact on the other). Red quadrant = immediate mitigation required; yellow = monitor and plan; green = acceptable risk.
Platform selection — if adopting a supply chain intelligence platform (Resilinc, Everstream, Sourcemap, SAP Ariba Supply Chain), onboard the platform after the initial mapping is complete. The initial mapping populates the platform's supplier database; the platform then provides ongoing monitoring.
Supplier portal setup — most platforms include a supplier portal where tier-1 suppliers log in to maintain their own profile data (locations, sub-suppliers, contact information, certifications). Onboard your top 50 suppliers to the portal in the first month.
Alert configuration — configure the platform to send automated alerts when monitored events affect supplier locations: natural disasters, political disruptions, labor strikes, financial distress signals, regulatory changes.
Continuous monitoring — supply chain risk is not static. Monitor:
Annual re-mapping cycle — re-survey tier-1 suppliers annually to capture changes in their supply networks. New sub-suppliers, closed facilities, new single-source dependencies — all of these change between survey cycles. An annual re-mapping cycle keeps the supply chain map current.
Supplier relationship health checks — quarterly check-ins with strategic supplier relationship managers to surface emerging risks before they become disruptions.
Structure the Gantt with separate tracks for:
The mapping project produces a supply chain risk register — a living document that becomes a board-level risk management tool. The Gantt chart converts that ambition into a sequenced, time-bounded project with clear deliverables.