How do you calculate supplier risk RPN?

Multiply the severity, occurrence, and detection scores together on a common scale. In FMEA these are typically rated 1-10, and the product is your Risk Priority Number used to rank suppliers from most to least critical.

What do severity, occurrence, and detection mean for a PPE supplier?

Severity is how damaging a failure would be — a barrier breach is high; a cosmetic issue is low. Occurrence is how often the supplier's process produces the problem. Detection is your ability to catch it before it reaches production; note that harder to detect scores higher, meaning worse.

Why does a high detection score make risk worse?

In FMEA, detection is scored inversely — a high number means you're unlikely to catch the defect before it's used. That's dangerous, so it drives RPN up, pushing you toward better incoming inspection or supplier controls.

What is a good supplier RPN threshold?

Most teams set an action threshold (commonly around 100 on a 1-1000 scale) above which mitigation is mandatory. There's no universal 'good' number — use it to rank and to trigger action, and always review any high-severity item regardless of total RPN.

Should I dual-source my highest-RPN suppliers?

Often yes. High RPN on a single-source meltblown or resin vendor is exactly the case for qualifying a second source, since occurrence and detection risk compound when you have no fallback.

How often should I re-score supplier risk?

At least annually and after any significant nonconformance, recall, or process change at the supplier. Scores drift as vendors improve or degrade, so a stale RPN can point your audits at the wrong vendor.

PPE & Infection Control Products calculator

Supplier Risk Calculator

Supplier risk here is a Risk Priority Number (RPN) — the classic FMEA product of severity, occurrence, and detection — applied to the vendors feeding a PPE and infection-control line. When a single meltblown supplier can shut down your mask output, or a resin lot can compromise glove barrier integrity, ranking suppliers by RPN tells you where to spend your qualification, audit, and dual-sourcing effort. Supplier quality engineers and procurement leads use it to turn a vague 'this vendor worries me' into a comparable score across the whole approved vendor list. The power of RPN is that it forces you to weigh not just how bad a failure is, but how often it happens and how likely you are to catch it before it reaches the patient-facing product.

What this calculator does

Estimate supplier risk for ppe and infection control products using production-ready inputs so teams can rank risks and decide which issue needs containment, controls, or escalation first.
Use it when supplier risk in ppe and infection control products needs a defensible ranking against other ppe and infection control products risks for the next review.
It multiplies severity, occurrence, and detection scores into a single Risk Priority Number so PPE suppliers can be ranked against each other on the same scale.

Formula used

Supplier risk score = supplier risk severity score × supplier risk occurrence score × supplier risk detection score
Use the same scoring scale across comparable supplier risk risks.

Inputs explained

Severity of supplier failure impact:
Likelihood the supplier issue occurs:
Ability to detect the supplier issue before use:

How to use the result

Use it during supplier qualification, annual AVL review, or when a nonconformance prompts you to re-rank a vendor's risk.
RPN is ordinal, not a probability — a score of 90 is not literally twice as risky as 45, and equal RPNs can hide very different severity profiles, so always check the individual scores, not just the product.

Current U.S. benchmarks

U.S. manufacturing runs at 75.6% of capacity with new factory orders at $657B per month (Federal Reserve and Census, May 2026).

Common questions

How do you calculate supplier risk RPN? Multiply the severity, occurrence, and detection scores together on a common scale. In FMEA these are typically rated 1-10, and the product is your Risk Priority Number used to rank suppliers from most to least critical.
What do severity, occurrence, and detection mean for a PPE supplier? Severity is how damaging a failure would be — a barrier breach is high; a cosmetic issue is low. Occurrence is how often the supplier's process produces the problem. Detection is your ability to catch it before it reaches production; note that harder to detect scores higher, meaning worse.
Why does a high detection score make risk worse? In FMEA, detection is scored inversely — a high number means you're unlikely to catch the defect before it's used. That's dangerous, so it drives RPN up, pushing you toward better incoming inspection or supplier controls.
What is a good supplier RPN threshold? Most teams set an action threshold (commonly around 100 on a 1-1000 scale) above which mitigation is mandatory. There's no universal 'good' number — use it to rank and to trigger action, and always review any high-severity item regardless of total RPN.
Should I dual-source my highest-RPN suppliers? Often yes. High RPN on a single-source meltblown or resin vendor is exactly the case for qualifying a second source, since occurrence and detection risk compound when you have no fallback.

Last reviewed 2026-05-12.