Abstract: Provided is a method and system of assigning a level of risk presented to an enterprise by a supplier of goods or services. In at least some embodiments, a tier level and/or a composite supplier risk index (CSRI) is calculated for the supplier based on answers provided to a series of multiple choice questions, wherein the questions are used to provide a measure of the risk elements presented by a supplier. In some embodiments, the risk elements comprise business continuity risk, information security risk, finance risk, operational risk, and supply chain risk. An embodiment can be implemented via a stand-alone computing system or such a system interconnected with other platforms or data stores by a network, such as a corporate intranet, a local area network, or the Internet.

Abstract: Provided is a method and system of assigning a level of risk presented to an enterprise by a supplier of goods or services. In at least some embodiments, a tier level and/or a composite supplier risk index (CSRI) is calculated for the supplier based on answers provided to a series of multiple choice questions, wherein the questions are used to provide a measure of the risk elements presented by a supplier. In some embodiments, the risk elements comprise business continuity risk, information security risk, finance risk, operational risk, and supply chain risk. An embodiment can be implemented via a stand-alone computing system or such a system interconnected with other platforms or data stores by a network, such as a corporate intranet, a local area network, or the Internet.