Abstract: Evaluating the risks posed by a supplier of goods and services, wherein the supplier subcontracts the production of the goods or services to a third entity, offshores the production of the goods or services, or uses an offshore subcontractor to provide the goods or services. In at least some embodiments, the invention comprises gathering answers to a series of multiple choice questions regarding characteristics of the goods or services provided by the supplier and calculating a risk score therefrom. An embodiment can be implemented via a stand-alone computing system or such a system interconnected with other platforms or data stores by a network, such as a corporate intranet, a local area network, or the Internet.