How do you calculate supplier risk (RPN)?

Multiply the three scores: severity x occurrence x detection. With severity 6, occurrence 4 and detection 3 the RPN is 72 on a raw 1-1000 scale; the calculator normalizes this to a 4.55 score for cross-vendor comparison. Rate all suppliers on the same 1-10 scale so the numbers are comparable.

What is a good supplier risk score for IoT components?

Lower is better. On a raw 1-1000 RPN, anything above roughly 100-125 typically demands a corrective action plan, and severity ratings of 9-10 (safety or recall exposure, such as a battery or charger fault) warrant action no matter how low the total.

What does the detection score mean?

Detection rates how likely your incoming inspection, in-line test or supplier's own controls are to catch the defect before assembly. A high detection score means you are unlikely to catch it, which raises risk; investing in ICT/functional test or AOI lowers that number.

Severity vs occurrence: which matters more?

They multiply equally in the math, but severity should override judgment. A defect that occurs rarely but causes a fire or a bricked device deserves attention even at a modest RPN, whereas a cosmetic scuff at high occurrence is a lower priority.

How do I lower a high supplier RPN?

Attack the factor you control. You usually cannot change severity, but you can reduce occurrence with a supplier audit or process-capability improvement, and reduce the detection score by adding AOI, ICT, or 100% functional test at incoming.

Should I use the same scale for every supplier?

Yes. RPN is only meaningful for ranking when severity, occurrence and detection use identical 1-10 anchor definitions across your whole approved-vendor list, otherwise a low-scoring vendor may just have a looser rating rubric.

Smart Home & Consumer IoT Hardware calculator

Supplier Risk Calculator

Supplier Risk (an RPN, or Risk Priority Number) scores how dangerous a given component supplier is to your smart home or consumer IoT build by multiplying three 1-to-10 ratings: how bad a defect would be, how often it occurs, and how well you can catch it before it ships. Sourcing engineers and supplier-quality teams use it to rank Wi-Fi modules, PCBAs, lithium cells, sensors and injection-molded enclosures on the same scale. In consumer IoT, one bad batch of BLE chips or a marginal solder-paste vendor can trigger a firmware-level field recall, so ranking suppliers by RPN tells you which audits, second-source qualifications and incoming tests to fund first. It is the standard PFMEA/supplier-FMEA math applied to your approved-vendor list.

What this calculator does

Estimate supplier risk for smart home and consumer IoT hardware using production-ready inputs so teams can rank risks and decide which issue needs containment, controls, or escalation first.
Use it when supplier risk in smart home and consumer iot hardware needs a defensible ranking against other smart home and consumer iot hardware risks for the next review.
It multiplies a supplier's defect severity, occurrence, and detection scores into a single Risk Priority Number for that component or vendor.

Formula used

Supplier risk score = supplier risk severity score × supplier risk occurrence score × supplier risk detection score
Use the same scoring scale across comparable supplier risk risks.

Inputs explained

Component defect severity (impact on device):
Defect occurrence likelihood at supplier:
Incoming-inspection detection ability:

How to use the result

Use it during supplier qualification, AVL reviews, or after a field-return spike to prioritize which vendors get audits, second-sourcing, or tighter incoming inspection.
RPN treats all three factors as equal multipliers, so a catastrophic-severity item can be masked by low occurrence and detection scores; always review high-severity components regardless of total RPN.

Current U.S. benchmarks

Global copper trades at $13,484 per tonne (IMF via FRED, May 2026), up 41.5% in a year, and U.S. industrial electricity averages 8.66 cents per kWh. Both feed electrified-hardware unit economics.
Steel mill PPI stands at 348.53 (BLS, May 2026), up 6.7% from a year earlier. New factory orders are up 2.3% year over year (Census).

Common questions

How do you calculate supplier risk (RPN)? Multiply the three scores: severity x occurrence x detection. With severity 6, occurrence 4 and detection 3 the RPN is 72 on a raw 1-1000 scale; the calculator normalizes this to a 4.55 score for cross-vendor comparison. Rate all suppliers on the same 1-10 scale so the numbers are comparable.
What is a good supplier risk score for IoT components? Lower is better. On a raw 1-1000 RPN, anything above roughly 100-125 typically demands a corrective action plan, and severity ratings of 9-10 (safety or recall exposure, such as a battery or charger fault) warrant action no matter how low the total.
What does the detection score mean? Detection rates how likely your incoming inspection, in-line test or supplier's own controls are to catch the defect before assembly. A high detection score means you are unlikely to catch it, which raises risk; investing in ICT/functional test or AOI lowers that number.
Severity vs occurrence: which matters more? They multiply equally in the math, but severity should override judgment. A defect that occurs rarely but causes a fire or a bricked device deserves attention even at a modest RPN, whereas a cosmetic scuff at high occurrence is a lower priority.
How do I lower a high supplier RPN? Attack the factor you control. You usually cannot change severity, but you can reduce occurrence with a supplier audit or process-capability improvement, and reduce the detection score by adding AOI, ICT, or 100% functional test at incoming.

Last reviewed 2026-05-12.