Invisible Backbone: Scoring Second-Tier Supply Risk Across Britain's 2026 Top 100
Photo: Michael Dibb, CC BY-SA 2.0, via Wikimedia Commons
For much of the past five years, the UK's operational resilience debate has been conducted at boardroom altitude. Analysts have pored over customer concentration disclosures, debt maturity walls and pension covenants. All of that matters. None of it captures the risk that sits furthest from the boardroom and closest to the production line: the second-tier supplier that nobody in the executive team can name.
The 2021 HGV driver shortage, the 2022 gas price shock and the periodic disruption to Red Sea freight all exposed the same structural weakness in British industry. Companies had mapped who they bought from. Far fewer had mapped who their suppliers bought from. Our 2026 scorecard attempts to close that gap, ranking the Top 100 by what we call a fragility score: a composite measure of how exposed each business's operations are to failure further down the chain.
How the score is built
We assessed each company across four pillars, drawing on filed accounts, payment practices reporting, published supplier disclosures, ONS input-output tables and sector insolvency data from the Insolvency Service. The pillars are deliberately weighted towards structural exposure rather than sentiment.
| Pillar | Weight | What it measures |
|---|---|---|
| Single-source dependency | 35% | Share of critical inputs or services with no qualified alternative supplier |
| Supplier payment terms | 25% | Days beyond terms paid to smaller suppliers, and deviation from sector norms |
| Geographic concentration | 20% | Proportion of critical inputs originating from a single region, port or cluster |
| Inventory and buffer depth | 20% | Weeks of cover on critical lines relative to demand variability |
A high score is not an accusation. It is a description of exposure. Several companies near the top of our table are highly profitable, well governed and entirely aware of their position. Fragility, after all, is a function of design choices as much as neglect.
What the 2026 table shows
The distribution is wider than we expected. The top decile of our ranking scores roughly four times higher on fragility than the bottom decile, and the gap has widened since we began assembling comparable data in 2019.
Sectors cluster predictably but not uniformly. Automotive, aerospace, food manufacturing and specialist construction sit at the exposed end, where qualification cycles are long, switching costs are high and a single unglamorous component can halt an entire line. Utilities and defence show moderate scores, tempered by deep contractual oversight. Professional services, consumer brands and software businesses sit at the resilient end, largely because their critical inputs are people and licences rather than physical goods.
The surprises sit inside sectors rather than between them. Two automotive firms of similar size can score 20 points apart, depending on whether they have qualified a second source for castings or electronics. The difference is rarely visible in headline financials. It shows up only when something breaks.
The payment-terms paradox
The most uncomfortable finding concerns payment behaviour. Firms that stretch supplier terms well beyond the Prompt Payment Code's 60-day ceiling tend to rank higher on fragility, and the causal arrow runs in both directions. Extending terms conserves working capital, but it also weakens the smaller suppliers on whom the buyer depends. A tier-two supplier paid in 95 days has less headroom to hold stock, retain skilled staff or absorb a cost shock. The buyer's cash flow improves; the chain's resilience deteriorates.
This is not a moral argument, though there is a reputational dimension that listed boards increasingly acknowledge. It is a straightforward risk transfer. Several of the businesses that score best on our table pay their smallest suppliers fastest, not out of generosity but because they have calculated the cost of a supplier failure against the cost of carrying the working capital. In most cases, the arithmetic favours paying early.
Geography is a single point of failure
Concentration by region is the pillar most often overlooked. A supplier base clustered around a single industrial estate, port or estuary may be diverse on paper and fragile in practice. Flood risk, local labour shortages, a single road closure or a fire at a shared logistics hub can take out several nominally independent suppliers at once.
The companies that manage this well think in corridors rather than contracts. They know which of their suppliers share a postcode, a power supply or a haulier. They stress-test for the scenario in which an entire cluster, not an individual firm, goes dark for a fortnight. That discipline is more common in the Humber and Teesside process industries, where co-dependency is a lived reality, than in parts of the M4 corridor where supply chains feel more dispersed than they are.
Inventory buffers are not a strategy
Since 2020, many UK businesses have rebuilt inventory as a form of insurance. It helps, but our data suggests it is a blunt instrument. Companies holding deep buffers often score poorly on single-source dependency, using stock to compensate for a structural weakness they have chosen not to fix. Buffers buy time; they do not buy options. A fortnight of cover is little consolation when requalifying a supplier takes nine months.
The most resilient businesses in the 2026 Top 100 treat inventory as a bridge to an alternative, not a substitute for one. They hold cover deliberately, with a documented plan for what happens when it runs out.
What the resilient do differently
Four practices separate the strongest performers on our scorecard.
First, they map to tier three and beyond for critical categories, not just tier one. Second, they maintain at least one qualified alternative for every input they classify as critical, even where the second source is more expensive and rarely used. Third, they contract for capacity rather than volume, retaining optionality even in benign markets. Fourth, they involve procurement in strategic planning rather than treating it as a transactional function.
None of these is novel. What distinguishes the leaders is consistency. They apply the same rigour to a £40,000 component as to a £40 million contract, because they understand that the size of the input bears no relation to the size of the disruption.
A regional read-across
Our regional breakdown reinforces a familiar pattern with a new twist. Businesses headquartered in the Midlands and the North East carry the highest average fragility scores, reflecting their concentration in advanced manufacturing and their dependence on tightly coupled supply clusters. London and the South East score lowest, largely because service-heavy business models dominate.
But the regional averages conceal as much as they reveal. The most improved companies in our 2026 table are clustered in South Wales and Northern Ireland, where a generation of mid-sized manufacturers has invested quietly in dual-sourcing and supplier development programmes. Their scores have fallen materially over three years. That is resilience built in ordinary years, not crisis years.
The boardroom question
The practical lesson for the 2026 Top 100 is that supply-chain fragility is now a governance issue, not merely an operational one. Audit committees that review cyber risk and climate exposure should be asking the same structured questions about tier-two dependency. Investors comparing two apparently similar businesses should treat a high fragility score as a discount factor, however healthy the current margin.
Britain's standout companies are, on the whole, better prepared than they were five years ago. But the table shows that preparedness is uneven, and the weakest links are rarely the ones named on the purchase order. The companies that understand this are already hardening their chains. The rest are carrying risk they have not yet priced.
