A Bill of Materials (BOM) risk assessment is the foundation of proactive supply chain management. Done well, it gives procurement and engineering teams a shared understanding of which components pose the greatest supply risk, where to focus mitigation efforts, and what the cost implications of various risk scenarios might be. Done poorly β or not done at all β it leaves companies discovering supply chain problems at the worst possible time: when production is already impacted.
Step 1: Complete BOM Inventory
The first step is ensuring you have a complete, accurate, and current BOM. This sounds obvious, but supply chain teams routinely work from BOMs that are out of sync with actual production versions β with engineering changes not yet reflected in procurement systems. Verify that your working BOM reflects current production configuration before proceeding.
For each line item, confirm: manufacturer part number (MPN), approved manufacturer list (AML) if multiple sources are qualified, current usage quantity per assembly, and annual demand volume. These data points are essential for quantifying risk exposure.
Step 2: Lead Time and Availability Mapping
For each MPN on your BOM, pull current lead time quotes from your authorized distributor(s) and compare to your production schedule requirements. Flag any component where current lead time exceeds your procurement horizon β this is an immediate risk requiring action. Vyrian’s platform provides real-time lead time data for millions of part numbers, enabling rapid BOM-level analysis.
Create a simple traffic light coding: Green (lead time within procurement horizon), Yellow (lead time approaching limit), Red (lead time already exceeds procurement horizon or component on allocation). This visualization immediately highlights where your supply chain is stressed.
Step 3: Lifecycle Status Assessment
Check the lifecycle status of every part on your BOM. Manufacturers classify components as: Active (fully supported, normal ordering), NRND (Not Recommended for New Designs β still produced but being phased out), Last Time Buy (LTB notification issued β limited time to place final orders), or Obsolete (no longer produced). Any NRND or LTB components on your production BOM require immediate action β either a last-time buy to cover remaining production lifetime, or an engineering redesign to qualify an alternative.
PCN (Product Change Notice) monitoring is equally important β manufacturers issue PCNs when they change die revision, package, or process for a part that may affect form/fit/function. Unmonitored PCNs have caused production quality problems when parts changed without buyer awareness.
Step 4: Single-Source and Concentration Risk
Identify every component on your BOM where you have only one qualified manufacturer and/or only one distributor relationship. Plot these against your traffic light risk coding from step 2 β the intersection of “single-source” and “Yellow/Red lead time” is your highest-priority mitigation target.
Also assess geographic concentration risk β if multiple critical components are manufactured at the same fab or in the same country, a regional disruption (natural disaster, geopolitical event) could impact multiple BOM lines simultaneously.
Step 5: Mitigation Planning and Action
For each identified risk, document the mitigation plan: strategic inventory build, second source qualification, engineering redesign, supplier relationship investment, or some combination. Assign owners and deadlines. Track progress in your regular procurement reviews.
The value of a BOM risk assessment is only realized if it drives action. Use Vyrian’s BOM upload feature to automate the lead time and availability check across your entire BOM, dramatically compressing the time required for steps 1 through 3 of this methodology.