What Is Commercial Risk?

Why Commercial Risk Matters

Commercial risk is the possibility that a business decision, contract or trading relationship will produce an outcome worse than expected. It can involve financial loss, operational disruption, weaker service or missed opportunities. For procurement and supply chain managers, exposure often begins before a contract is signed, when assumptions about price, demand, supplier capability, and delivery are accepted without sufficient challenge or reliable supporting evidence.

Every commercial commitment involves uncertainty, but uncertainty is not necessarily a reason to avoid an opportunity. Organisations must decide which exposures are acceptable, which require safeguards and which make an arrangement unsuitable. Paying the lowest quoted price may seem prudent until delayed deliveries, unreliable products, or supplier failure create costs far greater than the original saving. Good judgement considers consequences as well as immediate affordability.

Commercial risk also differs from an ordinary operational problem. A delayed vehicle becomes a commercial exposure when it triggers customer compensation, additional transport charges or lost revenue. A cyber incident becomes commercially significant when online orders stop, or suppliers cannot receive instructions. Understanding these connections lets finance, procurement, legal, and operational teams evaluate the full consequences of decisions rather than treating risks in isolated departments.

The challenge is especially important in the United Kingdom (UK), where private organisations and public authorities depend on extensive contracting networks. Public bodies must consider service continuity and the use of public money; commercial businesses also weigh margins, customer retention and competitive advantage. Effective risk management is therefore an ongoing discipline, linking early supplier assessment, carefully drafted agreements, financial monitoring and credible contingency plans throughout a relationship.

Five Main Sources of Commercial Exposure

Financial risk arises when a customer or supplier lacks sufficient liquidity, profits or borrowing capacity to honour its obligations. A supplier may report growing sales yet struggle to pay wages or purchase materials because customers settle invoices late. Buyers should assess cash flow, debt maturity, working capital and financial dependence on particular contracts, rather than assuming a strong credit score or a profitable year guarantees resilience.

Market risk develops when external conditions undermine planned prices, volumes or demand. Energy costs, commodity movements, interest rates and currency fluctuations can change the economics of an agreement. A manufacturer importing components priced in euros may face higher sterling costs if exchange rates move unfavourably. Buyers need to distinguish foreseeable commercial volatility from exceptional events and decide whether fixed prices, indexation or other arrangements distribute exposure appropriately.

Contractual risk concerns unclear obligations, unrealistic specifications, disputed variations and remedies that fail to protect the parties. An agreement might specify delivery dates without defining acceptance standards, or contain termination charges that exceed the value of switching suppliers. Commercial teams should examine responsibility for delays, intellectual property, warranties and liability limitations before award. Poorly understood clauses can turn an otherwise manageable disagreement into expensive litigation or prolonged service disruption.

Operational and technology risks arise when facilities, systems or logistics networks cannot support the promised service. A cyberattack may stop ordering and stock visibility, while a single manufacturing site can become a concentrated point of failure. The government’s Cyber Security Breaches Survey 2025/26 found that 43% of UK businesses identified a breach or attack during the preceding year. Reported incidents nevertheless vary considerably in severity.

Strategic and reputational risks complete the picture. Over-reliance on one supplier, entering an unfamiliar market, or failing to monitor subcontractors can threaten future options as well as current performance. Unethical behaviour and poor treatment of suppliers may damage trust and invite scrutiny. These categories overlap: a dispute over payment can create supplier distress, which then interrupts production and damages customer relationships well beyond the initial invoice.

Supplier Insolvency and Financial Due Diligence

The Insolvency Service recorded 23,938 company insolvencies in England and Wales during 2025. Construction accounted for 3,931 cases among those with recorded industry information, approximately 17% of that group. The figures demonstrate significant exposure, but industry totals alone cannot reliably establish the probability that any particular contractor will fail. Assessments should consider the supplier’s circumstances, contract criticality, available alternatives and the likely consequences of interruption.

Financial due diligence should consider recent accounts, cash generation, borrowing, creditor payments, ownership changes and the proportion of turnover represented by a proposed contract. An illustrative supplier with £20 million in annual revenue may still lack the working capital needed to deliver a £5 million mobilisation. Equally, negative profits in one reporting period may reflect exceptional costs rather than imminent failure, making informed interpretation essential.

Monitoring should continue after contract award, when financial circumstances can change considerably. Government guidance updated in November 2026 recommends at least annual reviews for key suppliers holding critical or important contracts, with closer scrutiny where risk increases. Warning signs might include requests for advance payment, persistent subcontractor complaints and unexplained service deterioration. Managers should investigate emerging patterns, not assume that an individual symptom proves insolvency.

Contracts, Pricing and Risk Allocation

Clear contracts specify outputs, performance standards, payment obligations and how changes are authorised. They should identify which events permit price adjustments and what happens if either party fails to perform. For example, a £2 million annual service agreement might include minimum volumes and early termination charges beyond its headline price. Understanding the full commitment is necessary before judging affordability or claiming a genuine procurement saving.

Liability caps, indemnities, insurance and guarantees can reduce financial exposure, but they are not interchangeable. Insurance depends on policy coverage, exclusions and limits; a contractual indemnity may prove ineffective if the responsible party cannot pay. Under section 2 of the Unfair Contract Terms Act 1977, applicable rules prevent exclusion of liability for death or personal injury caused by negligence, while certain other negligence exclusions must satisfy reasonableness requirements.

Price mechanisms require equal care. A fixed-price arrangement may offer stability but encourage suppliers to include contingency margins when costs are uncertain. Index-linked pricing can respond to movements in recognised costs, provided the index, base date and adjustment formula are clearly specified. An illustrative £500,000 annual contract rising by 8% creates an additional £40,000 cost; the parties should determine in advance how to manage that exposure.

Risk transfer is not automatically effective risk management. Requiring a small supplier to accept unlimited liability may increase its price, deter participation or create promises it could never afford to fulfil. The better approach allocates particular risks to the party best able to influence them and uses realistic caps, performance incentives, change controls and exit arrangements. Independent legal review is worthwhile where potential losses are substantial.

UK Cases – Costs, Disruption and Public Value

Marks and Spencer’s 2025 cyber incident shows how technology failures can become commercial problems. Its 2025/26 results disclosed £131.3 million of incident-related costs, including £109.3 million for systems response and recovery. The group also recorded £100 million of insurance proceeds relating to the incident. These figures are reported costs and recoveries, not a simple measure of all lost sales or the incident’s total economic impact.

High Speed Two (HS2) illustrates the risks of complex programme commitments. In May 2026, the Department for Transport estimated the programme’s cost at £87.7 billion to £102.7 billion on a mixed price basis. The National Audit Office (NAO) reported £46.8 billion spent by March 2026, including cancelled northern phases. Scope changes, inefficient delivery and underestimated timescales contributed to increasing costs; not every increase can be attributed to contractor performance alone.

In healthcare procurement, the NAO also found that National Health Service (NHS) trusts spent approximately £3.4 billion annually outside NHS Supply Chain, compared with £4.5 billion through its arrangements around September 2023. Some trusts cited availability concerns and better alternative prices. The evidence shows why purchasing consolidation cannot be judged on theoretical bargaining power alone: supply reliability, product suitability and actual market competitiveness affect value.

Assessing and Controlling the Risk

Risk assessment begins by identifying an event, its possible causes and the consequences for delivery, cost and customers. Managers often score likelihood and impact, but a neat numerical matrix can hide uncertainty. A low-probability event may still justify action if it could stop an essential service. Quantifying replacement costs, lost output, customer compensation and recovery time makes assessments more useful than generic labels such as high or medium.

Consider an illustrative annual supply agreement worth £1 million. If failure would require £150,000 of emergency purchases and £80,000 of downtime costs, the exposure could reach £230,000 before other consequences. That amount is a scenario, not an expected annual loss. Probability estimates, whether sufficiently evidenced or not, should not be mistaken for guaranteed forecasts; decision-makers also need to assess how quickly replacement capacity could become available.

Controls should reflect the particular threat. Multiple approved sources may reduce dependence, while financial guarantees or performance security may address defined losses. Inventory buffers, tested recovery procedures, access to essential data and agreed step-in or exit rights can protect continuity. Each safeguard has a cost, so managers should weigh its benefit against the expense and the practical likelihood that it will work reliably during disruption.

Risk registers should have named owners, review dates, early warning indicators and clear escalation thresholds. Finance can monitor liquidity and committed spend; procurement can track performance and subcontractor exposure; operations can test resilience and recovery procedures. Senior managers should receive a concise view of the most consequential risks, not pages of unchanged scores. Monitoring is valuable only when new evidence leads to timely decisions.

The UK Legal and Public Procurement Framework

For covered public procurement, section 12 of the Procurement Act 2023 requires contracting authorities to consider value for money, public benefit, transparency of policy and decisions, and integrity. Section 22 permits proportionate conditions of participation concerning financial and legal capacity or technical ability. It also restricts certain requirements for audited accounts and pre-award insurance, helping prevent excessive barriers to participation by capable smaller suppliers.

Section 68 of the same Act applies 30-day payment provisions to most qualifying public contracts, with specified exceptions and rules for invalid or disputed invoices. In private commercial relationships, the Late Payment of Commercial Debts (Interest) Act 1998 provides remedies for qualifying late payments. Official statistics found that large UK businesses paid 15% of invoices late in 2025, illustrating how routine payment practices affect supplier resilience.

Legislation does not make every contractual risk allocation enforceable. Applicable provisions of the Unfair Contract Terms Act 1977 restrict certain exclusions and limitations, although the relevant tests and territorial application differ. Public buyers must also identify the correct procurement regime for the contracting authority and contract, including distinct Scottish arrangements. Legal advice should address the actual wording and circumstances rather than rely on a generic contract template.

Turning Commercial Risk into Better Decisions

A balanced approach begins with what value the organisation seeks to create. Higher prices can sometimes be justified by more reliable delivery, stronger financial capacity or reduced exposure to service interruption. Equally, excessive insurance and security requirements can weaken competition without materially improving protection. Buyers should assess whole-life costs, supplier capability and credible downside scenarios together instead of using the lowest tender price as a substitute for judgement.

The same principle applies to opportunity. Entering a new market or investing in unfamiliar technology may expose an organisation to uncertainty while creating substantial and significant potential benefits. Sensible management tests assumptions, assigns ownership and establishes acceptable limits rather than rejecting innovation automatically. Where risks cannot be eliminated, clear contingency plans and transparent decisions can help prevent avoidable surprises and protect the organisation’s capacity to respond.

Strong commercial teams also recognise that contractual rights are only part of resilience. A damages claim cannot immediately restore production, reopen a disrupted ordering system or replace scarce specialist capability. Effective relationships encourage early disclosure of difficulties, supported by independent checks and enforceable obligations. The aim is not to remove constructive challenge from suppliers but to create enough trust and information to act before problems become crises.

Ultimately, commercial risk management protects both resources and opportunity. It requires disciplined financial assessment, realistic contract terms, informed market analysis and continued oversight after award. The most successful organisations distinguish risks worth accepting from exposures that threaten their ability to deliver. By treating risk as part of every significant commercial decision, procurement and supply chain professionals strengthen continuity, accountability and long-term value for customers and stakeholders.

Additional articles can be found at Commercial Management Made Easy. This site looks at commercial management issues to assist organisations and people in increasing the quality, efficiency, and effectiveness of their products and services to the customers' delight. ©️ Commercial Management Made Easy. All rights reserved.

UK Legislation and Further Reading

Original UK legislation

UK case studies and supporting financial evidence

 

Labels:
Subscribe to: Posts (Atom)