Passing a risk on does not remove it: what stays with you when a supplier carries the risk

A supplier agrees to carry the risk of late delivery, poor quality or cost overruns. The business records the risk as “transferred” and stops worrying about it. Months later the supplier fails. The business still has its legal rights, but its customers still experience the disruption, its own operations still lack the part or service it needed, and its owner still has to explain what happened. The risk was allocated. The exposure was not removed.

This is one of the most common gaps in how businesses think about risk. A contract decides who is obliged to pay after a failure. It does not decide whether that party can pay, whether pursuing them is worth it, or whether money would repair the damage. Some consequences cannot be transferred at all: lost time, lost customers, a missed season, a damaged reputation.

This article explains how to tell a real transfer from a paper one, why recovery through a chain of suppliers shrinks at every step, how aggressive risk transfer can change behaviour for the worse, and what a small business should keep for itself even when a supplier is contractually responsible. It is general information. Contract rights depend on the wording and the law that applies, so get legal advice on significant contracts and disputes.

Liability is not capacity

When you pass a risk to someone else, two questions remain:

Can they pay? A supplier whose margin on your job is a few per cent, but whose exposure under the contract could be many times that, has not really taken the risk. It has been converted into a likelihood that the supplier disputes, delays or fails.
Is recovery worth pursuing? Even a valid claim may cost more to enforce than it returns, take years, or be lost to the supplier’s insolvency.

And a third question sits behind both: does money fix the problem? Compensation after a failure rarely restores the time, trust or opportunity lost.

A useful habit is to treat every transferred risk as a credit exposure: an amount you are relying on someone else to pay, which depends on their financial strength just as an unpaid invoice does.

See it, influence it, absorb it

A common principle says risk should sit with the party best able to manage it. That is sound, but it has a limit. A party genuinely carries a risk only if it passes three tests:

Can they see it? Do they have visibility of the conditions that would trigger it?
Can they influence it? Can their decisions change how likely it is or how large it becomes?
Can they absorb it? Would the loss be survivable for them at the scale the contract contemplates?

A party that fails any one test is carrying the risk on paper only. The usual failure is the third. A subcontractor may control ground conditions, workmanship or a manufacturing process, and still be far too small to survive the loss if it goes wrong. When that happens, the loss comes back to you, usually through a dispute.

Some risks also sit across the boundary between the parties: integration between systems, changing requirements, interpretation of regulations, the handover into day-to-day operation. Forcing sole ownership of these onto one party can weaken cooperation, because the problem itself is shared.

Transfer changes behaviour

Every contract creates incentives. A supplier carrying a risk it cannot manage will add price to cover it, read the scope narrowly, delay reporting problems and look for ways to recover through claims. A customer protected from cost may keep changing requirements without noticing the strain on the supplier.

Before pushing a risk onto a supplier, ask:

Will this allocation help prevent problems, or only strengthen remedies after them?
Does the supplier have a reason to report problems early?
Is there a practical process for changes, so issues are discussed rather than hidden?
Could the price of transferring the risk make the whole job uneconomic?
Will it drive away capable suppliers or leave only those willing to gamble?

A fixed price does not mean a fixed outcome. It may fix the price of the work as written while creating an incentive to minimise effort and contest every change. A commercially strong contract is not the one that transfers the most risk. It is the one that best supports the outcome you need while still giving you enforceable protection. The fixed price or not article covers matching the pricing model to how well the work is defined.

Keeping a risk means keeping capability

The opposite approach, where the customer keeps more of the risk, can work well, but it has a condition. A business that keeps a risk must have the people, information and reserves to manage it. Keeping a risk without the capability to manage it is worse than transferring it, because you have neither the control nor anyone else to pay.

There is also a trap in the middle. Businesses sometimes transfer a risk, refuse to pay the premium that a genuine transfer costs, and at the same time cut their own oversight on the basis that “it is the supplier’s problem now”. That leaves nobody watching.

Recovery runs through a chain

The party most likely to cause your next serious loss may be one you have never dealt with. You contract with a supplier; that supplier buys from its own suppliers; those suppliers buy from others. Your dependence runs the whole length of the chain. Your contractual reach usually stops at the first signature.

As a general principle, a contract binds only those who signed it. If a failure starts two tiers away, you usually have to claim against your supplier, who must claim against theirs, and so on. Two things then work against you:

The chances multiply. Each link might fail: the contract may not cover this kind of failure, the supplier may not pursue its own supplier, or a party in the chain may no longer exist. If each of four links has an 80% chance of passing a claim on, the chance of the claim getting all the way through is not 80% but about 41% (0.8 × 0.8 × 0.8 × 0.8).
The amount shrinks. Each link applies its own liability cap and exclusions to whatever survived the previous one.

Beyond two or three links, full recovery should be treated as unlikely, whatever the paperwork says. A loss you cannot realistically recover has already been retained, whether or not anyone decided to retain it. That means it should be insured, funded or designed out, and choosing among those is a real decision. The changing the odds or changing who pays article covers how to choose between them.

There is also an incentive problem. Your supplier may depend on its own supplier more than it depends on you, and may prefer a quiet settlement that preserves that relationship over a vigorous claim that would recover your loss.

Instruments that bridge the chain

Some contract tools create a direct relationship where the chain provides none: manufacturer warranties registered in your name, parent company guarantees, direct agreements, collateral warranties and step-in rights. They are worth having for critical items, but only if three things are true:

they actually cover the failure you are worried about;
the party giving them can pay;
you know how and when you would use them, and someone is ready to do so.

A drawer of guarantees nobody has read is not protection.

What you should keep for yourself

Even where a supplier carries the contractual risk, the business keeps some things it should not give away:

Accountability for the whole result. If several suppliers each deliver their part, someone still needs to make sure the parts work together. That is usually you.
Enough monitoring to act early. Watch the supplier’s performance, financial health and capacity in proportion to how much you depend on them.
The ability to switch. Can you get access to designs, data, tooling, software licences, work in progress and know-how if the supplier fails? A right you cannot exercise in time is weak protection.
Ownership after handover. Warranties, support obligations and defects need someone who remains responsible after the job finishes.

A worked example

This is an illustration. A small electronics business assembles control boards for agricultural equipment makers. A batch of capacitors from its regular component distributor turns out to be faulty. The fault is not detected in testing, and boards start failing in the field six months later. Replacing boards, sending technicians to farms and crediting its customer costs the business about $240,000. The faulty components themselves cost about $6,000.

The owner traces the recovery chain:

The distributor. Its terms cover defective goods but cap liability at the price of the goods and exclude consequential loss. The owner estimates an 80% chance of recovering under the contract, but the most available is $6,000: an expected recovery of about $4,800, or 2% of the loss.
The overseas manufacturer. The business has no contract with it. Any claim would have to go through the distributor, which buys from that manufacturer regularly and shows little interest in pursuing it.

In practice, about 98% of the loss has been retained, even though the risk register had listed component quality as “transferred to supplier”.

The business makes four changes:

Changing the odds: it introduces sample testing of critical components from each new batch and buys only through authorised distribution with batch traceability.
Building reach: it registers directly with the manufacturer’s warranty programme where one exists.
Matching its own promises: it reviews its contracts with equipment makers so that its own liability for consequential losses is limited and matches what it could realistically recover or absorb.
Insurance: it asks its broker about product liability and recall cover, and what each would and would not pay for.

The owner also notices the mirror image. One equipment maker had asked the business to accept unlimited liability for any recall of its machines. The business could see and influence board quality, but could never absorb the cost of a recall of complete machines. Accepting would not have protected the equipment maker; it would only have meant the electronics business failed first. The two businesses agree a cap linked to a realistic recall scenario, backed by insurance.

How this applies to a small Australian business

Small businesses sit on both sides of this problem: they pass risks to their suppliers and are asked to carry risks for their customers. Practical steps:

List your critical suppliers and the risks you think they carry.
Apply the see, influence, absorb test to each.
Trace the chain for your two or three most serious possible failures and estimate realistic recovery.
Treat unrecoverable losses as retained: insure them, fund them or design them out.
Keep the ability to switch suppliers for anything critical.
Do not accept risks you cannot absorb just because a larger customer asks.
Check statutory rights. The Australian Consumer Law and other laws can give rights against suppliers and manufacturers in some situations, and can limit some contract terms. A lawyer can tell you what applies.
Talk to your broker about what your insurance covers once contractual recovery runs out.

Signals worth watching

Risks recorded as “transferred” with no further monitoring.
Suppliers taking on liabilities far larger than their business.
Critical parts coming from a single source two or three tiers down.
Guarantees and warranties nobody has read since signing.
Customers asking you for unlimited or uncapped liability.
No plan for what happens if a key supplier stops trading.

Common mistakes

Equating liability with protection.
Pushing risk onto parties who cannot absorb it.
Cutting oversight after transferring a risk.
Assessing only direct suppliers and ignoring the chain behind them.
Assuming a claim will pass smoothly down several links.
Accepting customer risks the business could not survive.

Frequently asked questions

Is it wrong to transfer risk to suppliers? No. It is often right, especially for risks a capable supplier controls and can absorb. The point is to check that the transfer is real.

What if the supplier is much bigger than us? Then they may well be able to absorb the risk, but they may also have stronger contract terms that limit what you can recover. Read the caps and exclusions.

Should we insist on parent company guarantees? For critical, high-value work with a supplier whose own balance sheet is weak, they can help. Check that the parent can actually pay.

What is the cheapest way to reduce chain risk? Often it is inspection and traceability for critical items, plus a second source for anything that could stop the business.

Can a supplier’s insurance protect us? Sometimes, but it depends on the policy, its limits and exclusions, and whether it responds to your loss. Ask for details, not just a certificate.

Questions to ask

For each risk we have “transferred”, could the other party actually pay?
Which failures could start two or more tiers away from us?
What would we realistically recover if our worst supplier failure happened?
Which losses have we retained without deciding to?
Can we switch suppliers quickly for anything critical?
Which customer risks have we accepted that we could not absorb?

Bringing it together

Transferring a risk changes who is obliged to pay, not whether the business feels the consequence. Test each transfer by asking whether the other party can see the risk, influence it and absorb it. Remember that recovery through a chain of suppliers shrinks at every link, so losses that cannot realistically be recovered have already been retained and need to be insured, funded or designed out. Keep accountability for the whole result, enough monitoring to act early and the ability to switch, and never accept a customer’s risk the business could not survive. A good contract allocates risk; only good management reduces it.

Source: KEVOS notes, drawing on teaching material on contract risk allocation, privity of contract and supply-chain recovery, and on industry commentary about collaborative and fixed-price contracting on large construction programmes. Examples and figures in this article are illustrations. This article is general information, not legal, financial or insurance advice.