Supply chain risk refers to the threats that can disrupt the continuity of goods, services or data flows between an organisation and its suppliers. It covers insolvency, geographic concentration, multi-tier subcontracting and non-compliance risks. CSRD, corporate due diligence obligations and NIS2 have made supply chain risk governance a formal regulatory requirement for large organisations.