When managing risk, creating awareness of risk internal and external exposures is the first step of the SCRM journey - but it's only the first of several necessary steps.

All events and threats, external and internal, must be evaluated in the context of your own granular organizational supply chain data in order to qualify and quantify the impacts.

Risk priority is unique to every organization, and even to its subordinate parts, based on the value at risk - revenue, profit, budget, mission, and even intelligence value. 

"Resilience" is too often thought of as how fast you react to and recover from events... but truly intelligent resilience is achieved by simulating and planning for risks before they happen.

Engage people from across the organization in the supply chain risk management process - because supply chain risks can arise in any organizational function or location.

Tools are not enough - you need to establish an SCRM methodology and retain information that lets you react faster and be more proactive in an increasingly risk-filled world.