The Next Supply Chain Crisis Isn’t a Black Swan — It’s a Governance Failure You Haven’t Built For Yet

Posted on February 4, 2026

0


Here Is Why the Distinction Matters.

Jon Hansen | Procurement Insights | February 2026


THE SHORT VERSION FOR BUSY EXECUTIVES

Every major supply chain disruption of the past five years — COVID, the Ukraine war, the Red Sea shipping crisis, semiconductor shortages — was treated as a black swan: rare, unpredictable, impossible to prepare for. None of them were. A 2008 Aberdeen study found that 99% of executives had already experienced supply chain disruptions and 84% admitted they were unprepared. Those numbers barely moved in the twelve years before the pandemic hit. The disruptions weren’t unpredictable. The organizations were ungoverned. Nassim Taleb’s black swan framework distinguishes between events that are genuinely unforeseeable and events that only appear unforeseeable because the observer’s framework doesn’t account for them. The second category isn’t a black swan at all — it’s a governance failure. And it’s the category that describes nearly every supply chain crisis of the modern era. The strategic question isn’t “what disruption comes next?” It’s “does your governance architecture absorb disruption regardless of its form?” That’s the question the industry still isn’t asking — and it’s the question Phase 0 readiness assessment was built to answer.

Read on for the evidence trail, the Taleb distinction that changes the conversation, and what governance-first readiness actually looks like in practice.


A DEEPER DIVE

In my previous post, I submitted my 2010 eWorld London lecture to five independent AI models and asked how well it aged. All five reached the same conclusion: the governance-first framework anticipated the supply chain reckoning of 2020–2023, and the preparation gaps I documented using 2008 data repeated at larger scale through every subsequent crisis.

One line from that analysis stopped me cold.

Model 3 traced the 2008 Aberdeen finding — 99% disruption, 84% unprepared — through COVID supply shocks, the Ukraine war commodity disruption, the Red Sea shipping crisis, and semiconductor shortages. The exact pattern described in 2010 repeated at larger scale, across more industries, with greater consequences. The diagnosis was the same each time: governance gaps across dispersed agents.

The term “black swan” came to mind within seconds. Not because these events were black swans — but because the industry kept calling them black swans, and the distinction between those two things is the entire argument.


The Taleb Distinction That Changes Everything

Nassim Taleb’s black swan concept describes events that meet three criteria: they are rare, they carry extreme impact, and they are rationalized only after the fact. The critical insight — the one most people miss — is that Taleb himself distinguishes between events that are genuinely unpredictable and events that appear unpredictable because the observer’s framework doesn’t account for them.

The second category isn’t a black swan. It’s a structural blind spot. And when that blind spot is the absence of governance, it’s not even a blind spot — it’s a choice.

Consider the evidence.

In 2008, Aberdeen documented that 84% of supply chain executives admitted they were unprepared for disruptions they already knew were coming. In 2010, I presented that finding to a room of senior procurement professionals in London and asked: under what governance model does your organization actually operate? The room knew the answer. Nobody had built for it.

Then COVID hit. Organizations that had spent a decade optimizing for cost discovered overnight that they had no governance architecture capable of absorbing disruption. Supply chains built on “just enough” inventory, single-source dependencies, and cost-first supplier selection didn’t just buckle — they broke. But the pattern wasn’t new. The 2008 data said it was coming. The governance gap said exactly where it would break. The only thing COVID added was the specific trigger. The structural conditions were already in place.

Then Ukraine. Same pattern. Commodity dependencies that were known, concentration risks that were documented, governance structures that didn’t exist. The disruption was geopolitical rather than epidemiological. The organizational failure was identical: ungoverned networks fragmenting under stress.

Then the Red Sea. Then semiconductors. The triggers changed every time. The diagnosis didn’t.


What “Black Swan” Actually Means in Procurement

When a CPO or supply chain executive calls a disruption a “black swan,” they are making one of two claims. Either the event was genuinely unforeseeable — in which case no reasonable governance framework could have prevented the impact — or the event was foreseeable but the organization lacked the governance to absorb it. In nearly every case documented across the Procurement Insights archive since 2007, it’s the second.

This isn’t a semantic distinction. It’s a strategic one.

If disruptions are genuinely unpredictable, then the correct organizational response is better forecasting — more data, better models, smarter prediction engines. That’s the response the industry has been buying for two decades. It’s also the response that hasn’t worked. The 84% unprepared figure from 2008 didn’t move meaningfully before 2020. It hasn’t moved meaningfully since.

If disruptions are structurally foreseeable but organizationally ungoverned, then the correct response isn’t better prediction. It’s better governance. Not predicting which disruption comes next, but building the organizational architecture that absorbs disruption regardless of its form.

That’s a fundamentally different investment. And it’s one the industry hasn’t made.


The Reactive-to-Proactive Transition

A reactive organization asks “what went wrong?” after the disruption. It commissions a post-mortem, identifies the specific failure point, and patches the specific gap. Until the next disruption hits a different failure point, and the cycle repeats.

A proactive organization asks “under what governance model do we actually operate, and will it hold when stressed?” before the disruption. It doesn’t try to predict the trigger. It builds the structural resilience that absorbs triggers regardless of their form.

The difference between these two questions is the entire Hansen Method value proposition.

Phase 0 readiness assessment doesn’t ask “what disruption are you preparing for?” It asks: how does your organization actually make decisions? Where do your official processes diverge from your actual processes? What happens when a node in your supply chain fails — do you have escalation paths, decision rights, and exception-handling governance in place, or do you improvise? Are your governance structures designed for the network you actually operate, or the network your org chart says you operate?

These are the questions that separate organizations in the upper-left quadrant of the Black Swan matrix — low governance, high impact, every disruption a “surprise” — from organizations in the lower-right: high governance, low impact, disruption absorbed by structure rather than luck.

The arrow between those two quadrants is Phase 0. It’s the transition from calling foreseeable events unforeseeable to building the governance that makes the distinction irrelevant.

But the matrix tells a second story — and it’s the honest one.

Once Phase 0 moves you from the upper left to the lower right, what happens next depends entirely on the quality of the governance you built. There are two paths, and every organization eventually takes one of them.

If the governance is real — decision rights are clear, escalation paths are tested, exception handling works the way it’s designed to work, and the organization actually operates the way its governance says it operates — then when a severe disruption hits, you move up to the upper right. Governance Under Stress. The system bends but holds. You absorb the hit and come back stronger. That’s the DND case: 97.3% delivery accuracy over seven consecutive years because the governance architecture was built to flex under real operational pressure, not to look good on a slide deck.

If the governance is theater — if Phase 0 was treated as a checkbox exercise, if the readiness assessment was completed but the findings were never implemented, if the org chart says “governed” but the actual behavior says “improvising” — then you don’t move up. You slide left to the lower left. False Security. You think you’re governed because someone did an assessment and someone signed off on a framework. But the governance isn’t real. It hasn’t been stress-tested. And the next disruption doesn’t move you to the upper right where the structure holds — it moves you straight back to the upper left. Ungoverned. High impact. Calling it a black swan all over again.

The matrix isn’t just a snapshot. It’s a cycle. And the only thing that breaks the cycle is governance that’s real enough to survive contact with actual disruption.


Why This Pattern Persists

The reason the industry keeps calling governance failures “black swans” is not ignorance. It’s incentive structure.

Calling a disruption a black swan absolves the organization of preparation failure. If the event was truly unforeseeable, then no one could have prepared. The post-mortem becomes a lessons-learned exercise rather than an accountability exercise. The consulting engagement becomes forward-looking (“let’s build resilience for next time”) rather than diagnostic (“why didn’t your governance hold?”). And the technology vendor gets to sell the next prediction engine, the next risk-monitoring dashboard, the next AI-powered forecasting tool — because the problem has been framed as insufficient foresight rather than insufficient governance.

Everyone in the ecosystem benefits from the black swan framing except the organization that absorbs the impact.

This is the same structural dynamic I documented in the 2010 eWorld lecture using Humphrey and Schmitz’s governance typology. The Walmart/Vlasic case proved that when a lead firm optimizes its own metric without governance alignment, the system pays. The pattern is identical in supply chain disruption response: when every actor in the ecosystem frames disruptions as unpredictable, the organization in the center absorbs the cost of everyone else’s framing.


What the Evidence Actually Shows — The DND Proof Point

Theory is easy. Everyone has a framework. The question that separates real methodology from consulting theater is simple: have you ever built governance that actually held under operational stress?

I have. And the details matter — because when you stress-test this engagement against the Black Swan events plotted in the upper-left quadrant of the matrix, the upper-right quadrant stops being theoretical.

In the late 1990s, SHL (part of MCI) was managing the Department of National Defence’s MRO procurement platform supporting Canada’s military IT infrastructure. The contract called for 90% next-day delivery. They were delivering 51%. They were about to lose the contract. Their first instinct was the one most organizations still default to: automate the existing system. Make it faster.

I asked a different question: what time of day do orders come in?

The answer was 4:00 PM. And that single data point unraveled the entire governance failure.

The service department had technicians incentivized to maximize daily service calls. Policy required ordering parts after each call, but the system was cumbersome, so technicians sandbagged — held all orders until end of day to hit their call targets first. By 4:00 PM, dynamic flux products that cost $100 at 9:00 AM were $1,000. Orders hitting late meant parts crossing the US border hit customs after hours. Call close rates were terrible because parts weren’t arriving to complete the service calls technicians had rushed to diagnose. But nobody saw the connection — because nobody was looking at how the agents in the system actually behaved versus how they were supposed to behave.

That’s strand commonality. Seemingly disparate data points — order timing, pricing curves, customs delays, call close rates, technician incentives — connected through shared attributes that collectively determined system performance. The solution wasn’t automation. It was governance.

What we built through RAM addressed every agent in the configuration. For suppliers: self-learning algorithms (government-funded through Canada’s SR&ED program) that weighted historic performance on delivery and quality, factored in real-time pricing and geographic proximity, and gave buyers manual override capability to reweight criteria when the situation demanded it. We deliberately expanded the supplier base at a time when the entire industry was preaching vendor rationalization — because a wider governed network is more resilient than a narrow ungoverned one. For logistics: a direct bridge into UPS that auto-generated waybill numbers and dispatched couriers the moment a PO was issued. For customs: pre-formatted clearance documents generated simultaneously with the PO, eliminating the manual handoff that was causing border delays.

Within three months, delivery performance went from 51% to 97.3%. Over seven consecutive years, cost of goods dropped 23% consistently — in line with dynamic flux product economics that the governance was designed to capture. The FTE equivalent across the collective buying organizations dropped from 23 to 3 — not because we eliminated suppliers, but because the governance eliminated the operational friction that required all those people. Escalations dropped. Multiple extra order touches disappeared. First-pass delivery and quality rose to the point where human intervention became the exception rather than the rule.

Now stress-test that governed system against every crisis in the upper-left quadrant of the matrix.

COVID-style supply shock — suppliers suddenly unavailable, logistics frozen. The ungoverned DND (the 51% version) collapses immediately. No visibility into which suppliers can deliver, no alternative routing, no way to shift priorities in real time. But the RAM-governed DND had an expanded supplier network ranked by delivery performance and geography, with buyer override capability to reweight criteria on the fly. When a node fails, the system routes to the next-best supplier automatically. The governance doesn’t predict COVID. It absorbs the node failure because the architecture was designed for exactly that kind of stress.

Semiconductor-shortage-style scarcity — parts unavailable or available only at extreme premiums. The ungoverned DND was already paying $1,000 for $100 parts because of the 4:00 PM ordering failure. The RAM system’s dynamic flux classification and time-of-day ordering governance eliminated that exposure structurally. Under genuine scarcity, the expanded supplier network and performance-weighted ranking means you’re sourcing from the supplier most likely to have stock and deliver — not the supplier you happen to have a contract with.

Red-Sea-style logistics disruption — shipping routes unreliable, customs delays cascading. The ungoverned DND was already failing at customs. RAM built customs clearance directly into the automated document generation — pre-formatted forms, pre-dispatched courier, priority processing. Under a logistics disruption, the geographic weighting in the algorithm shifts sourcing toward closer suppliers automatically. The UPS bridge provides real-time tracking visibility. The governance doesn’t predict the Red Sea crisis — it means your logistics chain has fewer failure points and faster rerouting capability because the governance was designed around the actual agents in the system.

The pattern across all three scenarios is identical. The disruption still hits. The severity doesn’t change. But the system bends instead of breaking — because the governance was built around how the organization actually operates, not how someone assumed it should.

The DND engagement was military MRO procurement, but the governance pattern is not vertical-specific — it is structural. Any organization with multiple agents, misaligned incentives, manual handoff points, and single-source dependencies will fracture under disruption the same way, whether the context is defense logistics, automotive supply chains, healthcare procurement, or global manufacturing.

And here’s what most analysts and consultants cannot say: I didn’t build this framework after studying disruptions from a distance. I built governance architecture in the late 1990s, funded by the Canadian government, that delivered measurable outcomes across every agent in the system for seven consecutive years. The Procurement Insights archive — over 3,300+ published articles from August 2007 to the present — documents the patterns that emerged from that fieldwork and the ones that followed. Gartner rotates analysts every few years. Forrester rebuilds frameworks with each new wave hire. Consulting firms reconstruct narratives after the outcomes are known. This archive doesn’t reconstruct. It documents in real time — and the DND engagement is where that documentation begins.

The gap between 51% and 97.3% isn’t technology. It’s governance. And governance isn’t something you install. It’s something you build — through Phase 0 assessment, through behavioral readiness analysis, through understanding that the difference between how your organization says it operates and how it actually does is the difference between the upper-left quadrant and the upper-right.


The Question That Matters

The next supply chain crisis is coming. It might be geopolitical. It might be climate-driven. It might be a cascading AI system failure. It might be something no one has imagined yet.

The question isn’t what form it takes.

The question is whether your governance architecture absorbs it — or whether you call it a black swan after the fact and start the cycle again.

Phase 0 readiness assessment was built to answer that question before it becomes urgent. Not by predicting the disruption, but by building the governance to survive it.

Stop trying to predict black swans. Build the governance to survive them.

-30-


¹ Based on documented outcomes: RAM 1998 DND engagement achieved 97.3% delivery accuracy over seven consecutive years; Hansen Method longitudinal analysis shows consistent 85%+ success rates versus Aberdeen/Hackett industry benchmarks of 30–50%.

Posted in: Commentary