The Index:
Supply Chain & Third-Party Terms You Should Know

The global risk landscape is constantly evolving. To stay ahead, it’s important to understand key concepts that will help you stay informed and attuned to the various risks and opportunities that affect your supply chain and third-party ecosystems.

Discover all the essential terms and context you need in our index below as you modernize supply chain and third-party risk management and compliance within your organization. Stay up to date by browsing through our extensive list of informative resources that define and contextualize common terminology and concepts that are essential to supply chain management and third-party risk management.

Alphabetical (select one)
ALL
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
A
Artificial intelligence (AI) and supply chains

Adoption of artificial intelligence (AI) has exploded in the past year, revolutionizing many industries and their supply chains.

B
BIS 50% Rule

The U.S. Department of Commerce’s Bureau of Industry and Security (BIS) is considering a “50% Rule” that would extend export restrictions to any entity majority-owned by companies already on BIS restricted lists, vastly expanding compliance obligations across global supply chains. By requiring organizations to identify and manage risks hidden in sub-tier ownership structures, the rule introduces significant new due diligence, cost, and complexity for exporters and supply chain risk professionals.

C
Canada FAFL Act (against forced & child labor)

A new law in Canada may be one to add to your monitoring of global regulations to prevent modern slavery in supply chains.

C
Carbon Border Adjustment Mechanism (CBAM)

The Carbon Border Adjustment Mechanism (CBAM) is an emissions trading scheme implemented by the EU that places a price on greenhouse gases emitted in the production of selected imports to prevent carbon leakage. The CBAM requires businesses that import to the EU to accurately report carbon emissions data across their supply chain and rethink supplier engagement.

C
Child Labor Eradication

The existence of child labor within global supply chains presents a troubling reality that demands immediate attention, both to save lives and protect your business.

C
China Critical Minerals Export Controls

China’s recent export controls policy restricts shipments of tungsten, tellurium, bismuth, indium, and molybdenum, citing national security and further extending its pattern of restricting access to critical minerals. These measures threaten global supply chains across defense, renewable energy, electronics, and manufacturing by creating potential shortages, delays, and rising costs for industries heavily dependent on these materials.

C
CHIPS Act

The CHIPS Act established a $52 billion CHIPS for America Fund to invest in the development of semiconductor technology in the United States.

C
Contested Logistics

Contested logistics refers to supply chain operations conducted in environments where adversaries attempt to disrupt or destroy logistics efforts. This complex landscape demands heightened stakeholder trust and transparency to ensure resilience and readiness across all domains, including land, sea, air, and cyberspace.

C
Corporate Sustainability Due Diligence Directive (CSDDD)

The Corporate Sustainability Due Diligence Directive (CSDDD) sets a standard for businesses in the EU to address sustainability, focusing on environmental impact, climate change, and human rights. It mandates due diligence practices for companies and their supply chains, ensuring accountability for suppliers' actions and promoting ethical business operations.

C
Critical Infrastructure

Systems and assets so vital to the United States that their incapacity or destruction would have a debilitating impact on security, national economic security, national public health and/or safety. Examples of critical infrastructure include energy, water, chemicals, nuclear facilities, the Defense Industrial Base, IT companies and cloud service providers.

C
Critical Minerals

Critical minerals like antimony, gallium, germanium, tungsten, and others underpin defense, energy, semiconductor, and renewable technologies, making them central to modern supply chains. As geopolitical tensions and China’s export restrictions intensify, these raw inputs have become high-risk dependencies, requiring proactive supply chain risk management and intelligence.

C
Cybersecurity Risk

Attacks can occur at every link in a typical software supply chain, and these kinds of attacks are increasingly public, disruptive, and costly.

D
DeepSeek’s Deception

“DeepSeek Deception” refers to Exiger’s discovery that the Chinese AI company DeepSeek’s research was secretly supported by China’s People’s Liberation Army, government-backed programs, and hundreds of PRC entities, despite claims of independence. The analysis also exposed links to U.S. universities and companies, showing the hidden web of affiliations and funding that create significant risks for export controls, research security, and investment.

D
Defense Industrial Base (DIB)

The Defense Industrial Base refers to organizations and companies that provide necessary products and services for the sustainment and deployment of U.S. military operations, including defense research and development, manufacturing, weapon systems and sensors.

E
ESG Due Diligence

ESG due diligence is the process of uncovering a company’s ESG (environmental, social, governance) policies and risk factors.

E
ESG (Environmental, Social and Governance) Risk

The supply chain risk category known as ESG — environmental, social and governance — spans broad issues like carbon emissions, modern slavery, money laundering, deforestation and more.

E
EU Deforestation Regulation (EUDR)

The European Union Deforestation Regulation (EUDR), likely to be effective December 30, 2025, mandates that large enterprises ensure their supply chains for seven key commodities — coffee, cocoa, soy, oil palm, cattle, rubber, and wood — do not originate from deforested land post-2020. This regulation promotes sustainable practices and compliance with environmental and human rights laws.

E
Executive Order 14028

The Cybersecurity Executive Order (Executive Order 14028) responds to the growing number of cyberattacks against government agencies, critical infrastructure and other companies.

E
Executive Order 14110 On AI

President Biden’s landmark Executive Order on Artificial Intelligence (EO 14110) marks the first significant policy-making effort by the U.S. government on the important topic of how best to manage the opportunity — and risk — of artificial intelligence.

F
FedRAMP

FedRAMP (Federal Risk and Authorization Management Program) is a government-wide initiative that standardizes security and risk assessment for cloud services. It enables federal agencies to adopt modern cloud technologies safely, reduces inefficiencies, and fosters public-private partnerships to drive innovation and enhance the security of government information.

F
Financial Risk

Financial risk can arise if an organization has poor financial solvency or any history of financial crime among its senior executives. Financial risk indicators can be extracted from sources such as news outlets, social media platforms and financial analysis providers.

F
FOCI (Foreign Ownership, Control or Influence) Risk

Managing foreign ownership, control, or influence (FOCI) risk is a critical concern for U.S. companies.

G
Germany Supply Chain Act

On June 11, 2021, the German Parliament passed a new law on corporate due diligence in supply chains called Lieferkettengest, or the German Supply Chain Due Diligence Act (GSCA).

H
Hardware Bill of Materials (HBOM)

An HBOM is a systematic structure comprising clearly defined data fields that outline the components of a hardware product and its attributes. It enables organizations to identify potential economic and security risks associated with equipment components that may be compromised, untrusted, and subject to availability risks.

M
Material Demand Aggregation

One benefit a robust supply chain management practice for your enterprise can deliver is cost savings. And one of the main drivers of this efficiency is material demand aggregation.

M
Modern Slavery Eradication (global regulations)

Modern slavery in supply chains refers to the exploitation and forced labor practices that occur within global networks. To eradicate modern slavery, governments are taking the initiative to make organizations accountable for all activities in their supply chains that might involve human rights abuses.

O
OFAC Compliance

When it comes to regulatory compliance, every business should know the Office of Foreign Assets Control (OFAC) and its sanctions.

O
Operational Risk

Operational risk spans a wide variety of different categories, including geopolitical and geoeconomic risk, the climate variability impact on the physical location of an organization, counterfeits, and potential alternative suppliers.

P
PFAS

PFAS (per- and polyfluoroalkyl substances) are synthetic chemicals known as "forever chemicals" due to their environmental persistence. Widely used in various industries, PFAS are linked to adverse health effects, making their presence in products, including healthcare items, a significant concern.

P
Politically Exposed Persons (PEP)

A politically exposed person refers to an individual who holds a prominent public position or function. Due to their role, the individual is considered more likely to engage in acts of bribery or corruption.

P
Procurement Risk

Procurement risks occur when the process of purchasing or sourcing products, services or resources becomes unreliable.

P
Product Risk

Product risk occurs when there’s a lack of transparency in your supply chain due to siloed data, incompatible systems across an enterprise, or the outsourcing of parts and raw materials.

R
RCR (Reputational, Criminal and Regulatory) Risk

RCR risks can arise when an organization’s suppliers fail to comply with applicable laws and regulations or neglect due diligence during their onboarding process.

S
Sanctions Screening

Sanctions are a type of economic pressure used by governments and international bodies to protect security interests and international law against aggressive actions or threats to international peace and security.

S
Scope 3 Carbon Emissions

As your company strives to reduce its carbon footprint, you can’t ignore the supply chains that are part of your business.

S
SCRM Program

The quickly evolving landscape of supply chain risk management (SCRM) requires organizations to develop strong programs that can anticipate and mitigate a variety of risks.

S
Section 889

As part of the 2019 National Defense Authorization Act (NDAA), Section 889 has significant implications for acquisition and procurement executives, government contractors and suppliers, particularly those involved in the telecommunications equipment and services sector.

S
Software Bill of Materials (SBOM)

A Software Bill of Materials (SBOM) is an organized list that offers an in-depth description of the open-source and proprietary components, like modules, libraries and other software artifacts, within a software package.

S
Supply Chain Digital Twin

A supply chain digital twin is a dynamic virtual representation of an organization’s supply chain. It utilizes real-time data and simulations to analyze performance, identify risks, and enhance decision-making, leading to improved efficiency and resilience in complex operational environments.

S
Supply Chain Diversification

Supply chain diversification is a strategic approach that reduces dependence on a single supplier or source by incorporating multiple suppliers and market opportunities. This enhances resilience, competitiveness, and adaptability in disruptions, ensuring smoother business operations.

S
Supply Chain Illumination

Supply chain illumination is an analytical evaluation of entities and materials within a supply chain to identify risks and enhance situational awareness. It combines supply chain mapping with real-time insights for comprehensive risk management and opportunities across multiple tiers.

S
Supply Chain Mapping

Supply chain mapping is the process of visualizing and analyzing the relationships between suppliers and sub-tiers within a supply network. It tracks the flow of materials and products, ensuring sustainability, regulatory compliance, and accurate tracking for corporations, compliance teams, and governments.

S
Supply Chain Resilience

Supply chain resilience is the ability to withstand, absorb and recover from a shock or disruption in the supply chain ecosystem without hindering organizational growth.

S
Supply Chain Risk Management (SCRM)

Supply Chain Risk Management involves a multi-faceted and dynamic landscape of risk vectors and opportunities that must be consistently assessed and constantly updated to reflect the many macro supply chain risk drivers, from geopolitical risk, trade wars and industrial espionage to modern slavery and climate change.

S
Supply Chain Visibility

An end-to-end view of all tiers and entities in the supply chain as well as material-inputs — metals, plastics, chemicals, electronics, etc. — that flow into the parts, products, and equipment in the supply chain.

T
Tariffs and Trade

Tariffs are a major supply chain challenge, with shifting policies creating complex risks for sourcing, compliance, and global operations. To manage this volatility, companies need intelligence that maps tariff exposure at the raw material and part level. This enables smarter decisions and resilient supply strategies, including the identification of alternative suppliers.

T
Third-party and Supply Chain Risk Management Maturity Model (TRADES)

The Exiger Third Party & Supply Chain Risk Management Maturity Model is designed to help managers assess their organization’s capabilities with respect to managing supply chain risk.

T
Third-Party Risk Management (TPRM)

A type of risk management that focuses on identifying, assessing and mitigating risks that arise from relationships with third-party suppliers, vendors and partners.

T
Transshipment

Transshipment involves routing goods through intermediate countries, a practice that can be legitimate or used illicitly to hide origin. When exploited, it enables tariff evasion and sanctions avoidance, creating hidden compliance and security risks in supply chains.

U
UK Modern Slavery Act

The UK Modern Slavery Act is a sweeping piece of legislation that seeks to regulate and address the issues of modern-day slavery in business operations and their global supply chains.

U
Ultimate beneficial owner (UBO)

The person who ultimately owns or controls a legal entity is known as the ultimate beneficial owner or UBO.

U
U.S. Pharmaceutical Supply Chain Dependence on China

The Exiger report A Bitter Pill: America’s Dangerous Dependence on China-Made Pharmaceuticals shows how global supply chains, strategic rivals, and quality breakdowns threaten U.S. healthcare, with nearly 90% of antibiotics relying on Chinese active pharmaceutical ingredients. This dependence exposes the nation to risks of supply chain sabotage, forced labor, and safety concerns, underscoring the urgent need for transparency, diversified sourcing, and revitalized domestic production.

U
Uyghur Forced Labor Prevention Act (UFLPA)

The Uyghur Forced Labor Prevention Act (UFLPA) took effect in the United States on June 21, 2022 to prohibit importation of goods into the United States that were produced by forced labor in the Xinjiang Uyghur Autonomous Region (XUAR) of China.

X
Xinjiang Uyghur Autonomous Region (XUAR)

The Uyghur Forced Labor Prevention Act (UFLPA) took effect in the United States on June 21, 2022 to prohibit importation of goods into the United States that were produced by forced labor in the Xinjiang Uyghur Autonomous Region (XUAR) of China.