The Limits of Self-Reported Data
Assessing risk in supply chains has traditionally been managed using a combination of tier-one site audits and supplier questionnaires. New laws and regulations, along with investor expectations, are now requiring companies to know far more about their supply chains than questionnaires can produce. While there are some questions that only a supplier can answer, companies that rely heavily on supplier-provided information may want to consider adding supply chain risk management technology to their risk management stack. Questionnaires are subjective in nature and rely on self-reported data from suppliers. This inherent subjectivity can lead to inaccuracies and inconsistencies in risk assessments. Suppliers may not always provide complete or truthful information, potentially masking risks that can later result in supply chain disruptions. A study by Björklund et al. (2019) found that, due to concerns about reputation and legal consequences, suppliers may underreport labor abuses or provide misleading information, meaning reliance on questionnaires alone can result in a false sense of security.
Questionnaires capture a moment in time, but supply chain risks evolve continuously — making real-time monitoring a necessity, not a luxury.
Questionnaires provide a snapshot of a supplier's risk profile at a specific point in time. However, risk factors in supply chains can change rapidly, and static questionnaires cannot provide real-time visibility into emerging risks or evolving supplier practices. Risks such as environmental impact, labor conditions, and regulatory compliance all require ongoing monitoring and continuous evaluation. For example, the US Uyghur Forced Labor Prevention Act (UFLPA) requires companies to constantly monitor their supply chains for the risk of forced labor. Without accurate and reliable real-time information, companies remain exposed to unforeseen risks and vulnerabilities that a periodic questionnaire simply cannot catch in time.
Risk doesn't sit still until you find it — sub-tier suppliers and upstream dependencies are invisible to questionnaire-based programs.
Supply chains are complex networks with multiple tiers of suppliers, and risks can arise at any level. Questionnaires may not capture risks associated with sub-tier suppliers or upstream dependencies, leaving companies unaware of potential vulnerabilities. Without a deeper understanding of the full supply chain ecosystem, companies may fail to identify and mitigate hidden risks until it is too late. Questionnaires also typically cover only a predefined set of questions focused on basic risk areas such as financial stability, labor practices, or environmental protocols. Supply chain risks are multi-faceted and can extend well beyond these limited areas, meaning a questionnaire-first strategy will always leave meaningful gaps in a company's exposure map.
Combining questionnaires with real-time data and technology is the only way to meet today's regulatory demands and protect your business.
While questionnaires can provide a starting point for risk assessment, relying solely on them is insufficient and leaves companies exposed to significant risks. To effectively monitor risk, companies should adopt a more comprehensive approach that combines questionnaires with real-time data, ongoing monitoring, and deeper supplier evaluations. FRDM works at the front of supply chain risk management, utilizing technology to uncover risk anywhere in the supply chain and providing companies with tools to work with suppliers to minimize exposure. FRDM helps companies comply with regulatory requirements including the UK Modern Slavery Act, Australia Modern Slavery Act, UFLPA, the German Supply Chain Due Diligence Act (LKSG), and the EU Corporate Sustainability Due Diligence Directive (CSDDD), among others.
*not sales material disguised as 'resources.'