Gantt Chart for Supply Chain Mapping

Most organizations know their tier-1 suppliers — the companies they write purchase orders to directly. Fewer know their tier-2 suppliers (who their tier-1 suppliers buy from). Almost none have visibility into tier-3 (the suppliers of their tier-2 suppliers). Yet the disruptions that made headlines in 2020–2022 — semiconductor shortages, port congestion, raw material scarcity — were tier-2 and tier-3 failures that propagated forward through supply chains that had no visibility into the problem until it arrived at their loading dock.

Supply chain mapping is the process of discovering, documenting, and risk-scoring your supply network beyond tier-1. It is a project with a defined scope, a structured methodology, and an ongoing monitoring phase. Without a Gantt chart to structure the work, supply chain mapping drifts: the tier-1 data collection takes twice as long as planned, tier-2 discovery never begins, and the risk scoring exercise produces a list but no action.

A Gantt chart for supply chain mapping makes each phase time-bounded, assigns ownership, and connects the discovery work to the risk mitigation actions that make the investment valuable.

Phase 1: Scope Definition and Stakeholder Alignment (Weeks 1–2)

Mapping scope definition — supply chain mapping cannot begin without defined scope boundaries. Decisions to make:

• Which product lines or product categories are in scope? (Start with your most revenue-critical or most supply-vulnerable products.)
• How deep will the mapping go? Tier-2 only, or tier-3 for critical components?
• What minimum spend or criticality threshold qualifies a supplier for inclusion? (Mapping every supplier of every part is often impractical; focus on spend-significant and strategic suppliers.)
• What geographies are the primary risk focus? (Single-country concentration risk, conflict-zone exposure, natural disaster frequency?)

Internal stakeholder engagement — supply chain mapping requires data from multiple functions: procurement (supplier contracts and spend data), operations (production bill of materials), engineering (approved supplier lists), legal (supplier contract terms including flow-down clauses), and finance (insurance and business interruption coverage). Align each function on what they will contribute before data collection begins.

Mapping methodology selection — two primary approaches:

• Active disclosure: send structured questionnaires to tier-1 suppliers requesting their supplier information. Relies on supplier cooperation and self-reporting. Lower cost, lower completeness.
• Supply chain intelligence platforms: use platforms (Resilinc, Everstream Analytics, Supply Wisdom, Sourcemap) that combine supplier-provided data with third-party intelligence (satellite imagery, news monitoring, geospatial risk data) to map supply networks. Higher cost, higher completeness and ongoing monitoring capability.

For organizations with complex supply chains in high-risk categories, a platform approach is worth the investment. For simpler supply chains, structured questionnaires with active follow-up can achieve adequate coverage.

Phase 2: Tier-1 Supplier Data Collection (Weeks 3–8)

Supplier master data review — start with your ERP or procurement system's supplier master file. Clean the data: remove duplicates, consolidate related entities (e.g., multiple sites of the same parent company), and confirm contact information is current. For most organizations, 20–30% of the supplier master file contains stale or inaccurate data.

Spend analysis — run a spend-by-supplier analysis to identify your top 80% spend concentration. In most supply chains, 10–20% of suppliers account for 80% of spend. Prioritize these suppliers for comprehensive mapping; apply lighter-touch approaches to the long tail.

Tier-1 data collection questionnaire — design a structured questionnaire covering:

• Physical locations: primary manufacturing site address, backup manufacturing sites, key warehouses and distribution centers
• Sub-supplier dependencies: primary raw material and component suppliers by category
• Single-source dependencies: are any inputs sourced from a single supplier with no qualified alternative?
• Lead time data: standard lead time, maximum committed lead time under supply disruption
• Certifications: ISO 9001, ISO 14001, social compliance certifications (SMETA, SA8000)
• Business continuity: does the supplier have a documented business continuity plan? Has it been tested?

Questionnaire distribution and follow-up — distribute questionnaires to the designated contact at each tier-1 supplier. Set a 2-week response deadline. Assign a procurement analyst to follow up weekly with non-respondents. For strategic suppliers, a phone call or video meeting from the procurement director is more effective than email.

Data validation — do not accept supplier self-reported data without validation. Cross-reference location data against satellite imagery (Google Maps, Bing Maps) for major facilities. Verify certifications against the certifying body's public registry.

Phase 3: Tier-2 and Tier-3 Supplier Discovery (Weeks 7–14)

Tier-2 discovery methodology — tier-2 supplier discovery requires one of three approaches:

Supplier flow-down: require tier-1 suppliers (via contract clause or supplier code of conduct) to complete the same questionnaire about their own suppliers. Effective when you have contractual leverage; unreliable when suppliers resist disclosure of their supply network (treating it as proprietary).

BOM-driven discovery: use your bill of materials to identify specific component categories and raw materials, then work with engineering and procurement to identify the known or likely suppliers of those materials. Focus on the highest-risk material categories first.

Supply chain intelligence platforms: platforms like Resilinc and Everstream use proprietary databases of supplier relationships to algorithmically map tier-2 and tier-3 networks based on known industry supplier relationships. Coverage is not 100%, but these platforms can reveal tier-2 dependencies in weeks that would take months to discover through manual questionnaires.

Single-source dependency identification — as tier-2 data is collected, flag every instance where a critical component or material has only one known supplier globally (or one supplier in a concentrated geography). These are your highest-risk nodes and require immediate attention.

Phase 4: Geopolitical and Natural Disaster Risk Overlay (Weeks 12–16)

Risk data sources — overlay each mapped supplier location with external risk data:

• Geopolitical risk: country risk ratings (Control Risks RISKMAP, Verisk Maplecroft, Dun & Bradstreet Country Risk), political stability indicators, sanctions lists (OFAC SDN list, EU sanctions), export control restrictions
• Natural disaster risk: flood zone mapping, earthquake risk zones, hurricane/typhoon probability, wildfire risk (FEMA, NASA, national equivalents)
• Climate transition risk: for long-horizon supply chain planning, assess climate physical risk (rising sea levels, water scarcity) and transition risk (carbon pricing, supply chain decarbonization requirements from customers)
• Infrastructure risk: port congestion history, transportation corridor reliability, power grid stability (critical for semiconductor and chemical manufacturing)

Risk concentration analysis — calculate the percentage of your supply base (by spend and by critical component count) concentrated in each high-risk geography. Common findings that surprise organizations:

• 60%+ of a product's value may originate in a single country (often China or Taiwan for electronics)
• Multiple tier-1 suppliers who appear independent may all source a critical input from the same tier-2 supplier in a single city

Phase 5: Single-Source Dependency Mitigation and Alternative Supplier Qualification (Weeks 14–22)

Single-source dependency prioritization — not all single-source dependencies are equally critical. Prioritize for mitigation by impact:

• High impact: components that would halt production within 2 weeks of disruption and have no inventory buffer
• Medium impact: components that would halt production within 1–3 months
• Lower impact: components that are easily substitutable or have long inventory buffers

Alternative supplier identification — for each high-impact single-source dependency, identify 2–3 potential alternative suppliers. Sources: industry directories, trade associations, commodity brokers, procurement intelligence platforms (Panjiva, ImportGenius, Kompass).

Alternative supplier qualification — qualification of a new supplier involves: supplier quality audit (on-site or remote), product sampling and testing, first article inspection, and commercial terms negotiation. Budget 3–6 months per qualification for complex components. Plot every qualification project on the Gantt with its own timeline.

Dual-source strategy — for critical components, establish a formal dual-source policy: primary supplier receives 70–80% of the volume, secondary supplier receives 20–30%. The secondary supplier remains qualified, commercially active, and capable of scaling rapidly if the primary supplier is disrupted.

Phase 6: Supply Chain Risk Scoring (Weeks 16–20)

SCOR framework application — the Supply Chain Operations Reference (SCOR) framework provides a standardized methodology for supply chain performance measurement that can be adapted for risk scoring. Apply SCOR-based metrics: supply chain reliability, responsiveness (lead time), agility (ability to respond to disruption), costs, and asset management efficiency.

Composite risk score — develop a composite risk score for each supplier node combining:

• Disruption probability: geopolitical risk + natural disaster risk + financial health risk (Dun & Bradstreet, Moody's credit ratings)
• Disruption impact: days of production impact × production value at risk
• Resilience: inventory buffer, recovery time objective (RTO) from business continuity plan, dual-source availability

Map risk scores visually on a heat map (probability on one axis, impact on the other). Red quadrant = immediate mitigation required; yellow = monitor and plan; green = acceptable risk.

Phase 7: Digital Supplier Network Platform Onboarding (Weeks 18–24)

Platform selection — if adopting a supply chain intelligence platform (Resilinc, Everstream, Sourcemap, SAP Ariba Supply Chain), onboard the platform after the initial mapping is complete. The initial mapping populates the platform's supplier database; the platform then provides ongoing monitoring.

Supplier portal setup — most platforms include a supplier portal where tier-1 suppliers log in to maintain their own profile data (locations, sub-suppliers, contact information, certifications). Onboard your top 50 suppliers to the portal in the first month.

Alert configuration — configure the platform to send automated alerts when monitored events affect supplier locations: natural disasters, political disruptions, labor strikes, financial distress signals, regulatory changes.

Phase 8: Ongoing Monitoring and Annual Re-Mapping (Ongoing)

Continuous monitoring — supply chain risk is not static. Monitor:

• Supplier financial health quarterly (watch for credit rating downgrades, news of financial distress)
• Geopolitical events that affect key supply geographies (escalating trade tensions, sanctions changes, regulatory shifts)
• Natural disaster events at supplier locations

Annual re-mapping cycle — re-survey tier-1 suppliers annually to capture changes in their supply networks. New sub-suppliers, closed facilities, new single-source dependencies — all of these change between survey cycles. An annual re-mapping cycle keeps the supply chain map current.

Supplier relationship health checks — quarterly check-ins with strategic supplier relationship managers to surface emerging risks before they become disruptions.

Building the Supply Chain Mapping Gantt

Structure the Gantt with separate tracks for:

1. Internal preparation: scope definition, stakeholder alignment, data cleaning
2. Tier-1 mapping: questionnaire design, distribution, follow-up, validation
3. Tier-2/Tier-3 discovery: running in parallel with tier-1 collection for highest-priority categories
4. Risk overlay: geopolitical and natural disaster data integration, risk scoring
5. Mitigation: one sub-track per high-priority single-source dependency qualification project
6. Platform and monitoring: platform onboarding, supplier portal, alert configuration
7. Ongoing cycle: quarterly monitoring, annual re-survey (recurring)

The mapping project produces a supply chain risk register — a living document that becomes a board-level risk management tool. The Gantt chart converts that ambition into a sequenced, time-bounded project with clear deliverables.