Many businesses come to depend, often without ever deciding to, on a single supplier for something they cannot operate without: the one manufacturer of a key component, the one distributor of a product they resell, the one service on which a core process runs. It usually happens gradually and for good reasons - that supplier was reliable, or cheapest, or easiest to work with - and while the relationship works, the dependence is invisible and comfortable. The danger is that it is a concentration of risk that shows no symptoms right up until the moment it fails, and then it is not a supplier problem but a threat to the whole business.
The exposure takes several forms, all flowing from the same root - that something essential rests entirely on one outside party the business does not control. The supplier can fail or go out of business, cutting off the critical input with little warning. It can raise its prices, and a business with no alternative has little choice but to absorb the increase, because the cost of not having the input is worse. It can have its own disruption - a shortage, a breakdown, a problem far up its own chain - that it passes straight through to everyone depending on it. Or the relationship can simply sour. In each case, a business with one supplier for a critical thing has no fallback, and its own continuity is hostage to the fortunes and goodwill of a company it cannot direct.
What makes single-supplier dependence especially treacherous is that it is invisible while things are going well, and by the time it becomes visible the options have narrowed. During the long stretch when the supplier is performing, there is no prompt to question the arrangement and every reason not to - finding a second source takes effort and may cost a little more, and nothing is going wrong. So the business does not act, and the dependence quietly deepens. When the disruption finally comes, the business is scrambling to find an alternative under pressure, in the worst possible conditions, having done none of the groundwork that would have made a switch quick - which is precisely when a second source is hardest to arrange.
Managing this does not mean duplicating every supplier, which would be wasteful; it means identifying where the business is genuinely exposed and reducing the risk there in proportion. The first step is simply to know which suppliers are critical - where a failure would actually stop the business - because concentration risk cannot be managed while it is invisible. For those critical points, the sensible measures are to develop at least a viable alternative even if not currently used, so a switch is possible without starting from nothing; to keep a reasonable buffer of stock where that applies; and to avoid drifting deeper into a dependence that would be catastrophic to lose. The comfort of a single reliable supplier is real, but it is borrowed against a risk that stays hidden until the day it arrives all at once. A business that has quietly arranged an alternative before it needs one turns that day from a crisis into an inconvenience.