The first is to look beyond the obvious. For example, are you aware of the risks that exist throughout the chain of custody for critical purchase components?
The second is to expect the unexpected. Organizational risk-management plans may deal with known or suspected risks but fail to provide a comprehensive overview of the risks inherent within the supply chain.
Third and final? Practice to be perfect. Effectively planning for risk requires full disclosure of risks, and all risk-mitigating and contingent actions that may be required, to all who will have to perform such actions.
