Direct answer: A supplier portfolio and concentration-risk page is not "fewer suppliers is better" or "just find more suppliers". The page should state: concentration metrics (spend/category/region/Top N, HHI, single-source share, capacity share), dependency assessment (critical parts, sole/single source, lead time, substitution/qualification, tooling/IP, geography/logistics), strategy (dual sourcing/shift/framework/buffer/contract/development), early warning (financial/capacity/quality/geopolitical/logistics), governance/KPIs/continuity/exit, public boundary. On the rules: MOF Internal Control Application Guideline No. 7 (Procurement) requires supplier selection/evaluation, contracts, acceptance, payment and records; No. 16 (Contract Management) requires performance/change/disputes/archive; No. 15 (Comprehensive Budgeting) requires budget/execution/assessment. This article is current to 2026-11-11 and is a summary of public rules and page method, not procurement/supply-chain/audit advice; the company's data, contracts and policies control.
This article is for procurement, supply-chain, quality, finance, planning and website teams at equipment, electronics, automotive-parts, medical-device, hardware, chemical, packaging and export manufacturers in Changzhou and nearby. It covers how to write and accept a supplier portfolio and concentration-risk page. The usual gap is "supplier count only, no spend/critical parts, single source without substitution, no thresholds, no early warning, dual source not qualified, exit without transition", ending with a page that only says "optimise supplier structure, reduce risk", while shortages/price increases/audit still disagree.
Concentration is not "supplier count": look at spend/critical parts/single source/capacity share. Dependency means substitution/qualification/tooling/IP/geography. Strategy needs dual sourcing/shift/buffer/contract/development, with early warning, continuity and exit.
How does this page relate to supplier scorecard, financial risk, second source, risk matrix and contract-exit pages?
The portfolio/concentration page answers "how concentrated the supplier structure is, which critical parts depend on whom, how to reduce dependency"; the scorecard page answers "QCDS/rating/allocation"; the financial-risk/resilience page answers "financial early warning/exposure"; the second-source/alternate-material page answers "substitution validation/qualification"; the risk-matrix page answers "risk identification/scoring"; the supplier exit page answers "termination/transition". The portfolio page is the main page for "structure/concentration" and cannot be replaced by a scorecard or risk matrix.
Common breaks: count only; no critical parts; single source without substitution; no thresholds; no early warning; dual source not qualified; exit without transition. The page separates "metrics—dependency—strategy—warning—governance—boundary" so procurement/supply-chain/quality/finance/planning share one vocabulary.
| Page | Question it answers | Key content | Cannot replace |
|---|---|---|---|
| Portfolio/concentration | How concentrated/dependency/how to reduce | Metrics, dependency, strategy, warning | Scorecard |
| Scorecard | QCDS/rating/allocation | Metrics, weights, rating | Structural risk |
| Financial risk/resilience | Financial warning/exposure | Warning, exposure, contract | Concentration |
| Second source/alternate | Substitution validation/qualification | Sample, qualification, switch | Portfolio strategy |
| Risk matrix | Identification/scoring/mitigation | Risk, score, mitigation | Structural metrics |
| Supplier exit | Termination/transition | Notice, handover, settlement | Concentration governance |
Page relationships are editorial; the company's data, contracts and policies control.
How should concentration metrics be set and accepted?
At minimum: spend concentration (Top1/Top5/Top10 share), category concentration (single category/supplier), region/country concentration, single/sole-source share, critical-part concentration, capacity share (how much of the supplier's capacity the company uses), HHI (optional), supplier count/additions/exits. Metrics should be split by category/plant/period, tax-inclusive/exclusive, with a stable basis; thresholds (e.g. Top1>30%, single source>X%) depend on company risk, not an industry standard. High concentration is not automatically high risk (strategic partnership/sole technology may be justified); combine with substitution/contract/capacity. Guideline No. 7 requires supplier evaluation/records.
Acceptance checks: metrics; basis; category/plant; thresholds; single source; capacity share; HHI; trend. Common gaps: count only; mixed basis; no thresholds; critical parts missing; capacity ignored; no trend.
| Metric | What to write | Evidence | Common gap |
|---|---|---|---|
| Spend concentration | Top1/5/10 share | Spend | Count only |
| Category concentration | Category/supplier/critical part | Spend/BOM | No category |
| Region/country | Region/country/logistics | Spend | Geography ignored |
| Single/sole source | Share/list/reason | Register | Not identified |
| Capacity share | Company share of supplier capacity | Supplier | Capacity ignored |
| HHI | Index/basis/threshold | Calculation | No threshold |
| Count/additions/exits | Count/additions/exits/trend | Register | No trend |
| Basis/period | Tax/plant/period/currency | Basis | Mixed basis |
Metrics/thresholds are editorial; the company's spend, BOM and risk appetite control.
How should dependency and critical parts be accepted?
At minimum: critical material/part list (by revenue/line stop/customer/safety/regulation), supplier dependency (sole/single/dual), substitution (alternate material/supplier/in-house), qualification/qualification cycle (customer/regulatory/PPAP), tooling/fixture/IP/software, lead time/inventory/buffer, geography/logistics/tariff/sanctions, supplier capacity/financial/quality. Critical parts must answer "how big is the impact of a supply stop, how long to recover, is there a substitute"; dependency is not "high spend" but "line stop/customer/compliance impact". Guideline No. 7 requires supplier evaluation, No. 16 contracts/exit.
Acceptance checks: critical list; dependency type; substitution; qualification cycle; tooling/IP; lead time/inventory; geography; capacity/financial/quality; impact/recovery. Common gaps: amount only; no substitute; long qualification; tooling lock-in; geography ignored; unclear recovery.
| Item | What to write | Evidence | Common gap |
|---|---|---|---|
| Critical parts | Revenue/line stop/customer/safety/regulation | BOM/impact | Amount only |
| Dependency type | Sole/single/dual | Register | Not identified |
| Substitution | Alternate material/supplier/in-house | Validation | No substitute |
| Qualification cycle | Customer/regulatory/PPAP | Record | Long cycle |
| Tooling/IP | Tooling/fixture/software/licence | Contract | Lock-in |
| Lead time/inventory | Lead time/buffer/safety stock | Planning | No buffer |
| Geography/logistics | Region/country/tariff/sanctions | Data | Geography ignored |
| Impact/recovery | Line stop/customer/recovery time | Drill | Unclear recovery |
Dependency/critical parts are editorial; the BOM, customer requirements and supplier facts control.
How should dependency-reduction strategies be accepted?
At minimum: dual/multi-source (qualification/share/switch), alternate material/design (VA/VE/customer approval), supplier development/support, capacity reservation/buffer stock, contracts (minimum volume/allocation/priority/exit/technical data), in-house/outsourcing, geographic diversification, framework/long-term agreements, emergency alternate/spot. Strategies need targets (reduce Top1/single-source share), milestones, owners, budget, validation (qualification/trial/switch) and old-supplier exit. Dual sourcing is not "get another quote"; it needs qualification/capacity/quality/cost; substitution needs customer/regulatory approval. Guideline No. 7 supplier selection, No. 15 budget.
Acceptance checks: strategy types; targets; milestones; owners; budget; validation; old-supplier exit; customer/regulatory. Common gaps: quote only; no qualification; no targets; no budget; no exit; customer not approved.
| Strategy | What to write | Evidence | Common gap |
|---|---|---|---|
| Dual/multi-source | Qualification/share/switch | Record | Quote only |
| Alternate material/design | VA/VE/customer approval | Validation | Not qualified |
| Supplier development | Support/capability/investment | Project | No investment |
| Capacity/buffer | Reservation/safety stock/buffer | Contract | No buffer |
| Contract | Minimum/allocation/priority/exit | Contract | No clauses |
| In-house/outsourcing | Make/buy/outsourcing | Assessment | Not assessed |
| Geographic diversification | Region/country/logistics | Data | Single region |
| Target/validation | Target/milestone/budget/exit | Plan | No target |
Strategies are editorial; the company's strategy, budget and supplier facts control.
How should early warning, continuity and exit be accepted?
At minimum: warning indicators (financial/capacity/quality/delivery/geopolitical/logistics/price/compliance), thresholds/frequency/owners, post-warning actions (communication/audit/dual source/buffer/shift), continuity (critical-part BCP/substitution/recovery time/drills), exit (notice/transition/tooling/documents/inventory/customer approval). Warning is not "look at a report"; it must trigger action; continuity must be drilled; exit needs transition/substitution, not "cut off supply". Guideline No. 16 contracts/exit, No. 7 records.
Acceptance checks: indicators; thresholds; owners; actions; continuity; drills; exit; transition; customer. Common gaps: no warning; no action; no BCP; no drill; exit without transition.
| Item | What to write | Evidence | Common gap |
|---|---|---|---|
| Warning indicators | Financial/capacity/quality/delivery/geopolitical | Report | No warning |
| Threshold/frequency | Threshold/frequency/escalation | Policy | No threshold |
| Owner/action | Who/communication/audit/dual/buffer | Record | No action |
| Continuity | Critical-part BCP/substitution/recovery | Plan | No BCP |
| Drill | Frequency/scenario/improvement | Record | No drill |
| Exit | Notice/transition/tooling/documents | Contract | No transition |
| Inventory/customer | Inventory/customer approval/substitution | Record | Customer not approved |
| Review | Warning/exit/improvement | Minutes | No review |
Warning/continuity are editorial; the company's risk, contracts and supplier facts control.
How should governance, KPIs and the public boundary be accepted?
Governance at minimum: owner (procurement/supply chain), category/supplier owners, monthly/quarterly review, cross-functional (procurement/quality/planning/finance/legal), thresholds/escalation, linkage to budget/scorecard/risk matrix/contracts. KPIs at minimum: Top1/Top5 share, single-source share, critical-part dual-source coverage, substitution qualifications, concentration trend, shortage count/recovery time, exit completion rate. The public page explains metrics/method/governance/boundary and does not publish specific suppliers/amounts/shares/contracts/critical parts/customers. Guideline No. 7 records, No. 15 assessment.
Acceptance checks: owner; review; cross-functional; thresholds; linkage; KPIs; public boundary. Common gaps: no owner; no review; finance absent; no KPIs; sensitive disclosure.
| Item | What to write | Evidence | Common gap |
|---|---|---|---|
| Owner | Procurement/supply chain/category | Appointment | No owner |
| Review | Monthly/quarterly, cross-functional | Minutes | No review |
| Threshold/escalation | Threshold/escalation path | Policy | No escalation |
| Linkage | Budget/scorecard/risk/contract | Record | Disconnected |
| KPIs | Top share/single source/dual source/recovery | Report | No KPIs |
| Data | Spend/BOM/suppliers/contracts | System | Scattered data |
| Review | Shortage/exit/improvement | Minutes | No review |
| Public boundary | No suppliers/amounts/shares | Page/permissions | Sensitive disclosure |
Governance/KPIs are editorial; the company's policies, budget and systems control.
How should the website page be written, and what must not be published?
Suggested sections: (1) concentration metrics/thresholds; (2) critical parts/dependency; (3) strategy/dual source/substitution; (4) warning/continuity/exit; (5) governance/KPIs; (6) contact window/update date. The public page explains "metrics, method, strategy, governance, boundary" and does not publish specific suppliers/amounts/shares/critical parts/contracts/customers/system screenshots. The English page should use consistent terms (supplier portfolio, concentration, single source, dual sourcing, substitution, capacity share, HHI, continuity, exit) and state the cut-off date.
Do not turn the portfolio page into an "optimise supplier structure/reduce risk" slogan, and do not claim "zero shortage/zero dependency" if it cannot be proven. The page should let procurement/supply-chain/quality/finance/planning judge "how concentrated, dependent on whom, how to reduce, how to warn, how to exit", without exposing suppliers and shares.
Go-live acceptance checklist
Ten checks: metrics/basis; thresholds; critical parts/dependency; substitution/qualification; strategy/dual source; warning/continuity; exit/transition; governance/KPIs; data/systems; public boundary. Each needs evidence and a review date. The pass standard is not "there is a supplier list", but that procurement/supply-chain/quality/finance/planning can judge concentration, dependency, strategy, warning and exit.
Before go-live, run a tabletop exercise on a real (redacted) category: spend → concentration → critical parts → dependency → dual source/substitution → warning → exit, simulating "single-source shortage", "supplier financial crisis" and "customer rejects substitution", to see whether the page and process work.
| Check | Pass standard | Evidence | If failed |
|---|---|---|---|
| Metrics/basis | Top/category/region/single source/capacity | Report | Add metrics |
| Thresholds | Threshold/escalation/risk appetite | Policy | Add thresholds |
| Critical parts/dependency | Critical/sole/single/dual | BOM | Add list |
| Substitution/qualification | Alternate material/supplier/cycle | Validation | Add qualification |
| Strategy/dual source | Dual/substitution/development/buffer/contract | Plan | Add strategy |
| Warning/continuity | Indicators/threshold/action/BCP/drill | Plan | Add warning |
| Exit/transition | Notice/transition/tooling/customer | Contract | Add transition |
| Governance/KPIs | Owner/review/KPIs/linkage | Minutes | Add governance |
| Data/systems | Spend/BOM/contracts/suppliers | System | Add data |
| Public boundary | No suppliers/amounts/shares | Page/permissions | Take down |
The acceptance list is editorial; the company's data, contracts and policies control.
Who should read it, who should not, and what decisions does it support?
For procurement, supply-chain, quality, finance, planning and website teams at equipment, electronics, automotive-parts, medical-device, hardware, chemical, packaging and export manufacturers in Changzhou and nearby; also for companies handling "count only, single source, no substitution, no thresholds, no warning, exit without transition". Not for teams without supplier-portfolio management, or that want one page to replace procurement/supply-chain/audit advice.
Read it if: building a portfolio/concentration page; only "optimise structure"; count only; single source; no substitution; no thresholds; no warning; no exit transition. Not suitable if: treating "concentration" as "supplier count"; "dual source" as "a quote"; "substitution" as "no qualification"; "page" as "procurement/supply-chain conclusion". Supports: metrics/thresholds, critical parts/dependency, strategy/dual source, warning/continuity, exit/governance and public-boundary self-checks.
FAQ
What is the difference between the portfolio page, scorecard, financial-risk and second-source pages?
The portfolio page answers "how concentrated the structure is, which critical parts depend on whom, how to reduce"; the scorecard answers "QCDS/rating/allocation"; the financial-risk page answers "financial warning/exposure"; the second-source page answers "substitution validation/qualification". Portfolio is structural risk, scorecard is performance, financial is single-supplier risk, second source is strategy execution; the four complement but cannot replace each other.
How should concentration metrics be set?
Look at spend Top1/5/10, category/region/country, single/sole-source share, critical-part concentration, capacity share, HHI (optional), supplier count/additions/exits; split by category/plant/period with a stable basis; thresholds depend on company risk (e.g. Top1>30%, single source>X%), not an industry standard. High concentration is not automatically high risk; combine with substitution/contract/capacity.
How to identify critical parts/dependency?
List critical parts by revenue/line stop/customer/safety/regulation; check sole/single/dual source, alternate material/supplier/in-house, qualification cycle (customer/regulatory/PPAP), tooling/fixture/IP/software, lead time/inventory/buffer, geography/logistics/tariff/sanctions, supplier capacity/financial/quality. It must answer "how big is the impact of a supply stop, how long to recover, is there a substitute".
How to reduce dependency?
Dual/multi-source (qualification/share/switch), alternate material/design (VA/VE/customer approval), supplier development/support, capacity reservation/buffer stock, contracts (minimum/allocation/priority/exit/technical data), in-house/outsourcing, geographic diversification, framework/long-term agreements, emergency alternate/spot; set targets/milestones/owners/budget/validation/old-supplier exit. Dual sourcing is not "a quote"; qualification/capacity/quality/cost matter.
How should warning/continuity be accepted?
Indicators (financial/capacity/quality/delivery/geopolitical/logistics/price/compliance), thresholds/frequency/owners, post-warning actions (communication/audit/dual source/buffer/shift), critical-part BCP/substitution/recovery time/drills, exit/transition/tooling/documents/inventory/customer approval. Warning must trigger action; continuity must be drilled; exit cannot "cut off supply".
How should governance/KPIs be set?
Owner (procurement/supply chain), category/supplier owners, monthly/quarterly review, cross-functional (procurement/quality/planning/finance/legal), thresholds/escalation, linkage to budget/scorecard/risk matrix/contracts; KPIs: Top1/Top5 share, single-source share, critical-part dual-source coverage, substitution qualifications, concentration trend, shortage count/recovery time, exit completion rate.
Should the website publish suppliers/shares/amounts?
Usually not specific suppliers/amounts/shares/critical parts/contracts/customers/system screenshots; it can publish metric types, method, strategy, governance, public boundary and update date. The goal is to let customers/suppliers understand portfolio management, not to disclose suppliers and shares.
One-sentence takeaway
The supplier portfolio and concentration-risk page on a Changzhou manufacturer's website is not "fewer/more suppliers"; it is about turning concentration metrics/thresholds, critical parts/dependency, substitution/qualification, dual sourcing/strategy, warning/continuity, exit/transition, governance/KPIs and public boundaries into a checkable list, so procurement/supply-chain/quality/finance/planning can judge how concentrated, dependent on whom, how to reduce, how to warn and how to exit.
Research method and limitations
This article is a summary of public rules and page method, not procurement/supply-chain/audit advice. It uses no unpublished company suppliers/amounts/shares/critical parts/contracts/customers/system screenshots or disputes; the tables and acceptance items are editorial and not procurement/supply-chain/audit conclusions. MOF Internal Control Application Guideline No. 7 (Procurement), No. 16 (Contract Management) and No. 15 (Comprehensive Budgeting) are public sources; the company's data, contracts and policies control. This article does not decide whether any specific concentration/dependency is reasonable, and does not promise "zero shortage/zero dependency"; companies should set them item by item based on category, supplier, customer and risk appetite.
Sources and basis
Current to 2026-11-11; the official pages below control.
- MOF Internal Control Application Guideline No. 7 — Procurement (Cai Kuai [2010] No. 11): Linyi Finance Bureau. Supplier selection/evaluation, contracts, acceptance, payment and records; used for concentration/dependency/supplier management.
- MOF Internal Control Application Guideline No. 16 — Contract Management (Cai Kuai [2010] No. 11): Linyi Finance Bureau. Contract performance/change/disputes/archive; used for contracts/exit/transition.
- MOF Internal Control Application Guideline No. 15 — Comprehensive Budgeting (Cai Kuai [2010] No. 11): Linyi Finance Bureau. Budget preparation/execution/assessment; used for strategy budget/assessment.