What this lesson covers
How to manage a supply chain — choosing suppliers, managing inventory, and maintaining the flow of inputs that a business depends on — and how to build a risk mitigation plan that identifies and addresses the things that could go wrong. These are linked topics: supply chain disruption is one of the most common operational risks, and risk mitigation depends on the standard operating procedures covered in the previous lesson.
Prerequisites
Writing Standard Operating Procedures. Risk mitigation relies on having documented procedures that can be audited, updated, and followed under stress.
Part 1: Supply chain management
What a small business supply chain looks like
For a restaurant or food service business, the supply chain includes:
- Primary food distributors: Broad-line distributors (Sysco, US Foods, regional equivalents) that carry most standard ingredients.
- Specialty suppliers: Specific producers for items the distributor doesn’t carry — heritage grains, regional chiles, specialty proteins, craft beverages.
- Local producers: Farms, ranchers, bakers, and other local sources. Often higher cost but fresher product and community relationship value.
- Equipment and supplies: Vendors for smallwares, disposables, cleaning products, office supplies.
- Service providers: Equipment repair, pest control, waste removal, linen service.
Supplier selection
Evaluate potential suppliers on five criteria:
| Criterion | Questions to ask |
|---|---|
| Product quality | Does the product meet your standards consistently? Can you get samples before committing? |
| Price | What are the unit costs? Are there volume discounts? How do prices compare across suppliers? |
| Reliability | Do they deliver on schedule? What’s their fill rate (percentage of ordered items actually delivered)? |
| Terms | What are the payment terms? Net 15, Net 30? Is there a minimum order? |
| Flexibility | Can they accommodate last-minute orders? Do they handle substitutions when items are out of stock? |
Primary vs. backup suppliers
For every critical input — the ingredients or materials without which you cannot operate — identify at least two suppliers. If your sole tortilla supplier has a production problem, you need a backup you can call that day. This costs nothing until you need it, and saves the business when you do.
Document the backup in your SOPs:
If [primary supplier] cannot fulfill an order: Contact [backup supplier] at [phone/email]. Account number: [number]. Standard lead time: [hours/days]. Price differential: [amount or percentage above primary].
Inventory management
Inventory management balances two opposing costs:
- Stockout cost: Running out of a key ingredient means lost sales, substituted menu items, or closing early. This costs revenue and reputation.
- Holding cost: Excess inventory ties up cash, occupies storage space, and risks spoilage (especially for perishable goods).
Par levels: Set a target quantity for each item — the amount you need on hand to cover operations until the next delivery, plus a safety buffer. Review and adjust par levels monthly based on actual usage.
FIFO (First In, First Out): Use oldest inventory first. Label everything with receipt date. This is both a cost control measure (reduces waste) and a food safety requirement.
Order triggers: When inventory reaches the par level minus the safety buffer, place an order. For a twice-weekly delivery schedule, the trigger is: current stock minus expected usage before next delivery minus buffer. If the result is negative, order.
Inventory counting: Count physical inventory weekly (or more frequently for high-value items). Compare to POS records of what was sold. Discrepancies indicate waste, theft, portioning errors, or recording mistakes.
Managing supplier relationships
In American business practice, supplier relationships are typically managed as contractual transactions — the best price for acceptable quality. But for small businesses, the relationship dimension matters: a supplier who knows your business and values your account will prioritize your order during shortages, alert you to price changes in advance, and work with you on payment timing during slow months.
This relational approach has limits — loyalty to an expensive supplier when a cheaper equivalent exists is a cost that needs justification. But treating suppliers as interchangeable inputs, manageable purely through contracts, ignores the resilience that mutual commitment provides.
Part 2: Risk mitigation
What a risk mitigation plan covers
A risk mitigation plan identifies what could go wrong, assesses the likelihood and severity of each risk, and specifies how the business will prevent, prepare for, or respond to each one.
Risk identification
Organize risks by category:
Operational risks — things that disrupt daily functioning:
- Equipment failure (kitchen equipment, HVAC, POS system)
- Supply chain disruption (supplier outage, delivery failure, ingredient shortage)
- Labor shortage (key staff illness, turnover, no-shows)
- Facility problems (plumbing, electrical, pest infestation)
- Food safety incident (contamination, allergen exposure, temperature failure)
Financial risks — things that threaten the business’s money:
- Revenue shortfall (slower ramp-up, seasonal slump, competitor entry)
- Cost overrun (supplier price increases, unexpected repairs, regulatory fees)
- Cash flow timing (late-paying customers, front-loaded expenses)
- Insufficient working capital (see use of funds)
Legal and regulatory risks — things that create liability or compliance failure:
- Health code violations
- License or permit lapse
- Employee injury (workers’ compensation)
- Customer injury or complaint
- Zoning or permit disputes
External risks — things outside the business’s control:
- Economic downturn reducing customer spending
- Weather events affecting operations or supply
- Public health restrictions
- Neighborhood changes (construction, road closures, demographic shifts)
Risk assessment matrix
For each identified risk, assess:
| Risk | Likelihood (1–5) | Severity (1–5) | Risk score (L × S) | Priority |
|---|---|---|---|---|
| Key equipment failure | 3 | 4 | 12 | High |
| Primary supplier disruption | 2 | 4 | 8 | Medium |
| Chef illness (>3 days) | 2 | 5 | 10 | High |
| Health code violation | 1 | 5 | 5 | Medium |
| Seasonal revenue dip | 4 | 3 | 12 | High |
| Grease fire | 1 | 5 | 5 | Medium |
High-priority risks (scores of 8+) need specific mitigation strategies. Lower-priority risks need monitoring and general preparedness.
Mitigation strategies
For each high-priority risk, specify:
Prevention: What reduces the likelihood?
- Equipment failure → preventive maintenance schedule, service contracts
- Chef illness → cross-train at least one other person on core recipes
- Revenue dip → build cash reserves during strong months; plan promotional events for historically slow periods
Preparation: What reduces the severity if it happens?
- Equipment failure → identify repair services in advance; know lead times for replacement parts; have backup cooking methods for critical items
- Supplier disruption → backup suppliers documented (see above); maintain 3-day safety stock on critical ingredients
- Chef illness → simplified menu that remaining staff can execute; list of temporary staffing agencies
Response: What do you do when it happens?
- Equipment failure → call repair service (number posted in kitchen); switch to backup cooking method; 86 affected menu items if necessary; notify front of house
- Food safety incident → stop service of affected item immediately; document the incident; contact health department if required; preserve evidence; notify insurance carrier
Insurance: What financial protection exists?
- General liability insurance
- Property insurance (covers equipment, inventory, and facility damage)
- Workers’ compensation (required in most states)
- Business interruption insurance (covers lost revenue during forced closure)
- Product liability / food contamination coverage
Documenting the plan
The risk mitigation plan should be a living document — reviewed quarterly, updated when new risks emerge or when the business changes. It connects directly to your SOPs: every prevention and response strategy should have a corresponding procedure that specifies who does what.
Guidance
- List the five most critical inputs your business depends on (ingredients, equipment, staff, utilities, permits). For each one, ask: what happens if this disappears for a week? Do I have a backup?
- Build a risk assessment matrix for a business you’re planning. Score each risk honestly — the point is to find blind spots, not to reassure yourself.
- Compare your risk mitigation plan to your SWOT analysis. Every threat in the SWOT should appear as a risk. Every weakness should be assessed for how it amplifies those risks.