Blogs

Where Do Everstream’s Supplier Risk Scores Come From?

Published: 11 November 2026

by Everstream Analytics

Everstream Analytics strategic risk scores combine 49 vetted external risk indices. You can add these to your own supplier data. Together, they rate how likely each supplier site is to face disruption and your risk exposure. Every score shows its source, method, and weighting, so you can explain it to anyone who asks.

If you lead procurement, supply chain, or risk, supplier scores shape real decisions. They influence which suppliers win business, where you hold extra inventory, and which suppliers require remediation, or potentially offboarding.

What is a strategic risk score?

A strategic risk score estimates how likely a supplier location is to be disrupted in the future. It looks ahead, not at what is happening today.

That sets it apart from an incident score, which tracks live threats such as a strike, a fire, or an approaching storm. Everstream Analytics uses both scores for every site. The incident score helps you respond. The strategic score helps you plan, so you face fewer incidents in the first place.

In simple terms: incident scores tell you where to react. Strategic scores tell you where to build resilience.

How is a strategic supplier scorecard calculated?

Everstream builds the supplier scorecard in four steps.

  1. Rate each risk. Every risk gets a score on a 25-point scale, banded as low, medium, or high. Higher numbers mean greater risk exposure.
  2. Match the method to the risk. Certain risks can be understood from historical data, such as customs delays or recurring transportation disruption. Some need expert input, such as long-range climate models, to understand how risks such as water scarcity could change over the next 50 to 100 years.
  3. Apply your weights. Everstream Analytics provides a combination of the risks for an overall supply chain disruption assessment. However, you have full control in how you apply these. This means the same risk can be weighted differently for different use cases.
  4. Roll it up. Everstream combines the weighted scores into one strategic risk score per site. You can then aggregate by company, region, and country.

Everstream Analytics uses exponentially weighted averaging rather than a simple mean. A plain average can bury one severe risk under several mild ones. This method lets a single high score lift the total. A supplier on a flood plain can’t hide behind a clean audit.

graphic shows how Everstream's supplier risk scores are measured by means is better than by averages 

Figure 1: An exponentially weighted averaging technique that ensures high individual scores have more impact on the composite number.

What makes a risk score defensible?

A defensible score is one you can trace from the headline number back to the raw data. Everstream builds traceability at three levels.

Every input shows its work. Click any risk in the platform to see its source, update frequency, granularity, methodology, and scale.

You own the weights. Because you set the model, you can justify every percentage in it.

Expertise. Everstream Analytics has a hybrid approach to risk scoring. This combines the best available data on each risk with inputs from risk analysis specialists. These experts have deep knowledge of specific regions and risk areas.

What does this look like in practice?

Scores change over time. Imagine a Tier-1 electronics supplier in Southeast Asia moves from medium to high risk. Your CFO wants to know why before approving a dual-sourcing budget.

You open the scorecard and drill down. The score has changed because civil unrest is growing in the region where your supplier is located. The source, method, and update date are clearly displayed. Currently, the supplier’s on-time delivery is strong. The problem is location, not performance.

That changes the conversation. Instead of debating the number, you discuss the response. You could qualify a second site, hold more buffer stock, or ask for the supplier’s business continuity plan should violence break out.

Risk scores for issues like civil unrest are updated weekly. Longer term risks, such as the potential for flooding are updated yearly. That is because these types of risks are slower moving.

However, you would still want to know about changes to slower moving risk scores, particularly if the risk is increasing year over year. This will allow you to prioritize supplier outreach to confirm that they have or are planning to build flooding barriers.

Super El Niño: Supply Chain Risks and Readiness

The 2026–27 Super El Niño formed faster than any on record.  This report gives supply chain leaders a clear view of what’s coming and how to get ahead of it. 

Get the report

What value do defensible risk scores create?

Defensible scores help you act faster, because fewer decisions stall in debate. Here’s how they show up across the business.

Use  Decision enabled  Reported outcome 
Supplier resilience  Which suppliers to engage, support, or replace  Fewer disruptions over time. One customer reported approximately 75% fewer disruptions and 90% less manual effort 
Category strategy  Which supplier wins when options look equal  One customer requires category managers to raise resilience 10% a year 
Inventory  How much buffer stock each site needs  Customers have cut buffer stock by around 5% 
Sub-tier mapping  Which direct suppliers to map first  Effort focused on the riskiest parts of your network 

The common thread is confidence. When everyone trusts where a score comes from, the question shifts from asking if the information is correct, to making risk-informed decisions.

Start with the suppliers that matter most

You do not need to score every supplier on day one. Start with the default model and your most critical sites. Add internal data as you gather it, and adjust the weights as your priorities shift.

Firefighting will always be part of supply chain risk management. Strategic risk scoring means you do less of it.

How Everstream Analytics can help

Everstream Risk Assessment gives you automated, location-based scores you can configure, trace, and defend. Want to see how your supplier network scores? Explore Everstream Risk Assessment.

Frequently asked questions 

Where do Everstream’s supplier risk scores come from? 

They combine 50+ external risk indices from vetted providers, live monitoring of about 5 million sources, and any internal supplier data you add. The Everstream Knowledge Graph links all of it to specific facilities. 

How does Everstream make risk scores transparent? 

Every risk in the platform shows its source, update frequency, granularity, methodology, and scale. You set the weights yourself, so you can explain how each overall score was built. 

Can I add my own supplier data to Everstream’s scores? 

Yes. You can import scores from internal systems, spreadsheets, supplier surveys, or providers like D&B and RapidRatings. You can also enter them directly, or use 10 flex fields for custom metrics. 

What is the difference between a strategic risk score and an incident score? 

A strategic score estimates how likely future disruption is, and guides sourcing and network design. An incident score tracks live events and guides your immediate response. Everstream keeps both for every site. 

Super El Niño: Supply Chain Risks and Readiness

The 2026–27 Super El Niño formed faster than any on record.  This report gives supply chain leaders a clear view of what’s coming and how to get ahead of it. 

Get the report

Share this post