---
title: "ORA Challenges Faced: Interdependencies and Supply Chain Risks"
description: "Challenges Faced: Interdependencies and Supply Chain Risks"
image: https://blog.bcm-institute.org/hubfs/Operational%20Resilience%20Audit/CTA%20ORA%20Morepost/ORA%20Challenged%20Morepost/CTA_ORA_Challenge_Interdependencies%20and%20Supply%20Chain%20Risk.png
---

[![BCMIWhiteLogo.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogo.png?width=556&name=BCMIWhiteLogo.png "BCMIWhiteLogo.png")](http://www.bcm-institute.org/)

- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/) 
    - [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
    - [Our History](https://www.bcm-institute.org/about-us/our-history/)
    - [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
    - [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
    - [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog) 
    - [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
    - [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
    - [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
    - [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
    - [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
    - [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
    - [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered) 
    - [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
    - [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
    - [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
    - [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
    - [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
    - [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
    - [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)

- <https://www.facebook.com/BCMInstitute/>
- <https://www.linkedin.com/company/business-continuity-management-institute-bcm-institute>

##### Operational Resilience Audit Series

![Bg Bann_ORA_1](https://blog.bcm-institute.org/hs-fs/hubfs/Operational%20Resilience%20Audit/Operational%20Resilience%20Audit%20Background%20Banner/Bg%20Bann_ORA_1.jpg?width=1920&name=Bg%20Bann_ORA_1.jpg "Bg Bann_ORA_1")

# ORA Challenges Faced: Interdependencies and Supply Chain Risks

Assessing interdependencies and supply chain risks during an operational resilience audit introduces several challenges for auditors.

This series of OR audit blogs summarises the understanding of these challenges before embarking on their operational resilience audits, focusing on "Interdependencies and Supply Chain Risks."

[Moh Heng Goh](https://blog.bcm-institute.org/operational-resilience-audit/author/moh-heng-goh) Jan 16, 2024

###### Operational Resilience Audit-Specialist-Expert

#### Challenges Faced by Auditors when Conducting an Operational Resilience Audit

#### Interdependencies and Supply Chain Risks

| Assessing interdependencies and supply chain risks during an operational resilience audit introduces several challenges for auditors: Complex Supply Chain Networks Modern businesses often have intricate supply chains across multiple vendors, suppliers, and partners. Mapping and understanding these networks comprehensively is challenging, especially when there are tiers of suppliers and subcontractors involved. Visibility and Transparency Gaining visibility into third-party entities' operations and resilience measures can take time and effort.   Auditors might need direct access to these external partners' internal workings or risk management strategies, challenging to assess their impact on the organisation's resilience. Dependency Identification Dependencies on external entities might take time to become apparent within the organisation. These dependencies can be critical, and disruptions in third-party operations (e.g., supplier bankruptcy and geopolitical events affecting vendors) can severely impact an organisation's continuity Risk Transfer and Risk Amplification While organisations might outsource certain functions to third parties to mitigate risks, this can also introduce new risks or amplify existing ones. Relying on external entities might inadvertently transfer risks without fully understanding or mitigating them. Regulatory and Compliance Risks Compliance requirements often extend to third-party relationships. Ensuring these external entities adhere to the necessary standards and regulations can be challenging and requires constant monitoring and assessment. Supply Chain Resilience Evaluating the resilience of the entire supply chain network involves understanding each entity's vulnerabilities and preparedness. This can be complex due to various partners' different capabilities, geographic locations, and operational structures. Auditors must undertake comprehensive risk assessments encompassing the entire supply chain network to address these challenges. Collaboration and information sharing between the organisation and its external partners become essential. This might involve establishing contractual agreements that include resilience requirements, conducting supplier audits, and fostering closer relationships to gain insights into the risk management strategies of third-party entities. Leveraging technology for supply chain mapping, risk quantification, and real-time monitoring can enhance visibility and aid in identifying vulnerabilities. Additionally, creating contingency plans and alternate sourcing strategies can mitigate the impact of disruptions arising from dependencies on external entities. Summing Up ... Addressing these challenges often requires a multidisciplinary approach involving collaboration across various departments, access to updated information, leveraging technological solutions for data analysis, and continuous adaptation to emerging threats. Flexibility and agility in audit methodologies are crucial to assess and enhance an organisation's operational resilience effectively. Types of Challenges Faced by OR Auditor and Reviewer   Find out more about Blended Learning ORA-5000 \[ORA-5\] & ORA-300 \[ORA-3\] |
| --- |

| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/130553fb-1a34-45c7-8d7a-0e91483d5237) | [![Tell Me More About BCM- 8030](https://no-cache.hubspot.com/cta/default/3893111/4efea5b2-f209-48aa-b101-671debce9437.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4efea5b2-f209-48aa-b101-671debce9437) | [![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/4df1d21d-d377-487a-920b-b7799c6a2c82) |
| --- | --- | --- |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/618b44d7-b58a-4819-87b6-aa423fe4461d) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/6a19ecac-b465-4c06-a769-36a0b69ce74c) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/826e513d-4cd5-4894-9e76-9b4e2e262334) |
| [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/d0bd308d-92fc-49b5-b250-bb5b8b08c3b3) | Please feel free to send us a note if you have any of these questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [![New call-to-action](https://no-cache.hubspot.com/cta/default/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/f457bdeb-1008-40d6-bffa-be4583a4ab41) |

#### **For Your Comments:**

 

### More Posts

[![New Call-to-action](https://no-cache.hubspot.com/cta/default/3893111/04334171-099a-49e5-becc-c8c082c7947f.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/04334171-099a-49e5-becc-c8c082c7947f)

![BCMIWhiteLogoSmall.png](https://blog.bcm-institute.org/hs-fs/hubfs/Blog%20Testing/BCMIWhiteLogoSmall.png?width=72&name=BCMIWhiteLogoSmall.png "BCMIWhiteLogoSmall.png")

All rights reserved. Copyright 2026

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Moh Heng Goh",
    "url" : "https://blog.bcm-institute.org/operational-resilience-audit/author/moh-heng-goh"
  },
  "dateModified" : "2024-01-19T14:33:52.466Z",
  "datePublished" : "2024-01-16T13:54:26.000Z",
  "headline" : "ORA Challenges Faced: Interdependencies and Supply Chain Risks",
  "mainEntityOfPage" : {
    "@id" : "https://blog.bcm-institute.org/operational-resilience-audit/challenges-faced-interdependencies-and-supply-chain-risks",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.bcm-institute.org/hubfs/BCMI%20Logo.png"
    },
    "name" : "BCMI Pte Ltd"
  }
}
```