A risk map is only worth its quarterly re-run

Every resilience program ships a risk map. The ones that matter ship a calendar: who re-runs it, which quarter, and what threshold triggers action between runs. Maps age in months; suppliers age faster.

The best version we have seen ran by a buyer with a spreadsheet habit and a standing hour every quarter. It caught a Tier-2 bankruptcy eleven weeks before the industry press did.