How do you calculate a supplier risk score?

Multiply each factor by its weight and sum: severity x 0.40 + occurrence x 0.35 + detectability x 0.25. With severity 9, occurrence 5, and detectability 6, that is 3.6 + 1.75 + 1.5 = 6.85.

Why is severity weighted highest at 0.40?

In cell and gene therapy, the consequence of a supplier failure, a scrapped autologous lot or a patient-impacting excursion, often outweighs how often it happens or whether you catch it. The 0.40 severity weight keeps high-impact suppliers near the top of the list.

What is a good supplier risk score?

On a 1-10 input scale the output also runs roughly 1-10, so 6.85 is moderately high and flags a supplier worth a deeper audit or a dual-source plan. Lower scores can stay on routine monitoring; the exact thresholds should match your quality system's tiers.

How should I score detectability?

Higher detectability scores mean issues are harder to catch at incoming inspection. A supplier whose defects slip past receiving QC and surface only in-process or at release deserves a high detectability input, which raises the overall risk.

Can I compare a media vendor against a vector supplier with this?

Yes, as long as you use the same anchored 1-10 scale and rater calibration for both. The weighting is identical across supplier types, so a media house and a viral vector provider land on one comparable scale.

Severity vs occurrence in this model?

Severity captures how bad the impact is if a problem occurs; occurrence captures how likely it is to happen. Severity carries more weight (0.40 vs 0.35) because a rare but catastrophic supplier failure can still be the one that scraps a patient's lot.

Cell Therapy & Gene Therapy Equipment calculator

Cell Therapy Supplier Risk Score Calculator

Cell and gene therapy supply chains hinge on a handful of critical suppliers: GMP media houses, single-use kit makers, plasmid and viral vector providers, and equipment vendors whose failure can halt a clinical campaign. This calculator produces a weighted supplier risk score from three FMEA-style inputs, severity, occurrence likelihood, and incoming-control detectability, using a 0.40/0.35/0.25 weighting that leans on impact. Supplier quality, procurement, and QA teams use it to rank vendors on a consistent scale and prioritize audits, qualification, and dual-sourcing. Because a single sole-source vector or media excursion can scrap an irreplaceable autologous lot, a disciplined risk score keeps attention on the suppliers that can actually hurt patients and programs.

What this calculator does

Score supplier risk for single-use assemblies, media, vectors, reagents, cryostorage equipment, or critical GMP services.
a procurement or supplier quality team is ranking which critical supplier needs mitigation, dual sourcing, or extra qualification
It computes a single weighted risk score as severity x 0.40 plus occurrence likelihood x 0.35 plus detectability x 0.25.

Formula used

Supplier risk score = impact severity × 0.40 + occurrence likelihood × 0.35 + incoming control detectability × 0.25
Use the same scoring scale when comparing media, single-use kits, vector suppliers, equipment vendors, and services.

Inputs explained

Supplier issue impact severity:
Supplier issue occurrence likelihood:
Incoming control detectability:

How to use the result

Use it to rank media, single-use kit, vector, equipment, and service suppliers on one scale for audit and qualification prioritization.
It is a relative ranking tool, not an absolute pass/fail; scores are only comparable when every supplier is scored against the same anchored scale and rater calibration.

Current U.S. benchmarks

U.S. manufacturing runs at 75.6% of capacity with new factory orders at $657B per month (Federal Reserve and Census, May 2026).
Steel mill PPI stands at 348.53 (BLS, May 2026), up 6.7% from a year earlier. New factory orders are up 2.3% year over year (Census).

Common questions

How do you calculate a supplier risk score? Multiply each factor by its weight and sum: severity x 0.40 + occurrence x 0.35 + detectability x 0.25. With severity 9, occurrence 5, and detectability 6, that is 3.6 + 1.75 + 1.5 = 6.85.
Why is severity weighted highest at 0.40? In cell and gene therapy, the consequence of a supplier failure, a scrapped autologous lot or a patient-impacting excursion, often outweighs how often it happens or whether you catch it. The 0.40 severity weight keeps high-impact suppliers near the top of the list.
What is a good supplier risk score? On a 1-10 input scale the output also runs roughly 1-10, so 6.85 is moderately high and flags a supplier worth a deeper audit or a dual-source plan. Lower scores can stay on routine monitoring; the exact thresholds should match your quality system's tiers.
How should I score detectability? Higher detectability scores mean issues are harder to catch at incoming inspection. A supplier whose defects slip past receiving QC and surface only in-process or at release deserves a high detectability input, which raises the overall risk.
Can I compare a media vendor against a vector supplier with this? Yes, as long as you use the same anchored 1-10 scale and rater calibration for both. The weighting is identical across supplier types, so a media house and a viral vector provider land on one comparable scale.

Last reviewed 2026-05-12.