:quality(85))
Article Highlights:
There are a few data points that manufacturers consistently fail to account for that could make a major difference in high-risk scenarios, where disruptions must be mitigated.
Very few suppliers automatically tell their customers where a specific part is fabricated, assembled, or tested. But when a disruption strikes a particular region, these differences matter. Without site-level data, teams are far more likely to spend their first critical days of an event trying to work out which of their parts are actively exposed.
Compliance programs typically collect declarations stating whether a part meets RoHS or REACH. But fewer collect the full material composition behind those declarations, and fewer still know where the component’s underlying materials originated.
In a 2022 McKinsey survey of global supply chain leaders, roughly 45 percent said they had either no visibility into their upstream supply chain or could only see as far as their first-tier suppliers. That figure explains a pattern familiar to anyone who’s worked through a shortage. Companies collect large amounts of supply chain risk data on the suppliers they buy from directly, including quality scores, pricing, financial ratings, and delivery performance.
Unfortunately, many of the most damaging disruptions take place at the second or third tier, rendering this type of tier-one data largely irrelevant. These gaps in sub-tier visibility aren’t necessarily glaring, however—until a part goes on allocation, a customer audit uncovers a compliance oversight, or a “multi-sourced” component turns out to have a single point of failure.
But there are a few data points that manufacturers consistently fail to account for that could make a major difference in these high-risk scenarios. Armed with these valuable nuggets of supply chain intelligence, companies are much better-suited to identify threats, assess active disruptions, and take decisive mitigating action when their production is at stake.
1. Where Parts Are Actually Manufactured
Very few suppliers automatically tell their customers where a specific part is fabricated, assembled, or tested. Rather, their invoices likely list the company’s headquarters. For electronic components, those manufacturing steps often happen in different countries, at facilities the buyer might have never even heard of.
But when a disruption strikes a particular region, these differences matter. A natural disaster, power outage, or impending trade restriction affects specific sites, not corporate headquarters. Without site-level data, teams are far more likely to spend their first critical days of an event trying to work out which of their parts are actively exposed, while more informed competitors are already placing orders with alternate sources.
The cost of overlooking the actual manufacturing locations of parts and assemblies is largely in the time businesses need to spend—during an active disruption—determining where their parts are made and what the resulting impact is going to be. If that information was consistently collected on an annual basis, then the organization could go straight to the work of minimizing the consequences of the disruption.
2. Hidden Single Sources Behind “Multi-Sourced” Parts
Approved vendor lists often show two or three manufacturers for a part. Consequently, risk assessments often evaluate those parts as resilient and well-protected from a multi-source standpoint. What these evaluations fail to recognize, however, is that alternates from different manufacturers sometimes share a common upstream source. One may be a rebranded version of another. Both may use die from the same foundry, or rely on the same raw material supplier.
When that shared source is disrupted, every “alternate” fails at once. This is one of the most damaging gaps in supply chain risk data—failing to recognize the single upstream bottlenecks that multi-sourced components all converge on. These hidden vulnerabilities are so risky because teams believe they have redundancies, and therefore don’t build buffer inventory or pursue additional qualification. As a result, there’s no fallback in place if an upstream disruption strikes and knocks out a part and its qualified crosses simultaneously.
3. Lifecycle Projections, Not Just Current Status
Most organizations track whether a part is active, NRND, or obsolete. Fewer, however, track how long it’s likely to remain active. A part that’s active today but forecast to reach end-of-life in eighteen months carries a very different risk than one with ten years of expected availability.
The potential consequences of neglecting lifecycle projections show up in design. Engineers might select parts based on current status, leading products to launch with components already in their final years of production. Less than 24 months later, the organization could find itself in desperate straits, funding last-time buys, broker purchases, or board redesigns within just two years of the product’s initial release.
Lifecycle forecasts give design teams the information they need to avoid these costly outcomes before they become unavoidable.
4. The Details Inside Product Change Notifications
PCNs tend to be treated as routine paperwork. While EOL notices get attention, run-of-the-mill notifications about material changes, fab transfers, or new assembly sites are often filed without any meaningful consideration or review.
But those smaller changes can carry real consequences. A change in plating material can affect solderability or compliance status. A fab transfer can alter reliability characteristics in ways that matter for automotive, medical, or aerospace applications. A new assembly site can move a part into a region with different trade or sourcing restrictions (while also potentially altering the part’s COO or COD). For regulated industries, an unreviewed PCN can lead to shipping products that no longer match their qualification—a costly problem to unwind once it reaches customers.
5. Full Material Composition and Upstream Origin
Compliance programs typically collect declarations stating whether a part meets RoHS or REACH. Fewer collect the full material composition behind those declarations, and fewer still know where the component’s underlying materials originated.
While this level of detail has historically not been necessary for most original equipment manufacturers (OEMs), operating with these gaps is becoming more dangerous. Without full composition data, every new substance added to the REACH Candidate List or covered by new PFAS rules triggers another round of supplier surveys. Without origin data, companies are exposed to a growing set of country-specific trade restrictions.
China’s export controls on gallium and germanium in 2023 left many manufacturers in a bind, unsure of which of their parts depended on those materials. The Defense Department’s expanded restriction on tantalum, tungsten, and specific magnets—which is scheduled to take effect January 1, 2027—will require defense suppliers to show where covered materials were mined, refined, and separated, rather than only where they were melted or produced.
Companies without this supply chain risk data will either scramble to gather it or run the risk of losing substantial business from the defense industry.
6. Ownership and Corporate Control
Supplier risk reviews usually include various key performance indicators around financial health, but they often miss ownership structure. But who controls a manufacturer, and where that controlling entity is based, now matters arguably as much as its balance sheet.
The Nexperia situation in late 2025 showed how quickly this can become a supply problem. After the Dutch government took control of the chipmaker, China blocked exports from Nexperia’s Chinese facilities, and automakers were suddenly faced with the prospect of stark shortages of basic discrete components that had never appeared on any risk list.
Mergers and acquisitions carry related risks, since acquiring companies often consolidate overlapping product lines and discontinue parts that customers previously assumed were secure. Tracking ownership changes, foreign control, and M&A activity gives procurement teams time to react strategically before these effects reach their orders.
7. Depth of Authorized Distributions
While the number of authorized distributors carrying a part and their inventory levels are easy to check, they’re rarely tracked over time. Shrinking authorized distribution is often an early signal that a part is heading toward a shortage, NRND, or outright obsolescence.
It also impacts the seriousness of counterfeit risk. When authorized inventory runs out, buyers turn to brokers and independent distributors, where the likelihood of counterfeit, refurbished, or mishandled parts rises sharply. For defense, aerospace, and medical manufacturers, a counterfeit part can bring field failures, recalls, and regulatory consequences that far exceed the financial cost of the component itself.
Leverage Overlooked Data With Z2
Closing these intelligence gaps doesn’t require a Herculean effort. Rather, it primarily asks businesses to connect the right supply chain risk data to their bills of materials (BOMs), keeping it current and presenting it so that each team can act on what’s most relevant to them.
The starting point is clean part data. Manufacturer part numbers need to be normalized and matched to accurate records before any external data can be applied. From there, companies benefit most by prioritizing high-impact parts first, such as single-sourced components, parts in high-volume products, and components subject to strict regulatory requirements. Finally, the data needs to be updated continuously, because factors like manufacturing locations, lifecycle status, and trade restrictions can all shift rapidly and without forewarning.
Supply chain risk management (SCRM) tool Z2 brings these overlooked data points together at the part level. Z2 provides businesses with lifecycle forecasts, PCN tracking, manufacturing site data, and sourcing depth, among other forms of supply chain intelligence. These holistic pictures of part risk allow teams to see threats that don’t always appear in standard supplier scorecards.
In addition, Z2 maintains a lifecycle forecasting tool that leverages:
A proprietary database of over one billion electronic components
Proven data collection techniques
Over two decades of industry experience
This dynamic approach gives our projections a high level of currency and precision, a strategy that’s led to an obsolescence forecasting accuracy of over 90%. Using Z2’s obsolescence forecasting tool allows businesses to closely follow a supply chain risk factor—lifecycle projections—that’s all too often overlooked.
To learn how Z2 can help businesses stay on top of the supply chain data points that can make the difference during disruptions, schedule a free trial with one of our product experts.
