What is an exposure tier in a supplier hazard register?

If you've inherited a supplier risk spreadsheet from a predecessor, you've probably seen a column labeled something like "Flood Risk: Y/N" and wondered what it's telling you. That checkbox is doing the job of something more useful: an exposure tier. Here's what the term means and why it matters more than a flat flag.

The short definition

An exposure tier ranks how exposed a single site is to a single hazard. The ranking comes from conditions at that location: elevation, distance from the hazard source, and the terrain around it. A supplier's warehouse might sit two miles from a river that floods every decade, or it might sit on the floodplain itself, fifty feet from the bank. A county-level flood map treats both the same. An exposure tier doesn't.

Most registers use three to five tiers (low, moderate, high, severe, or similar labels), and each tier is tied to a specific condition: how close the site is to the hazard source, what the terrain does when the hazard event happens, and how the site itself is built or sited. A site in a "high" tier for storm surge isn't high because a hurricane model says the county could flood. It's high because the facility sits at an elevation and distance from the coast that puts it in the path when surge happens.

This is the piece a generic spreadsheet can't do. A zone-level PDF tells you the county is in a flood zone. It doesn't tell you where the supplier's building sits inside that zone, what the slope looks like around it, or whether the parking lot is the low point that floods first while the production floor stays dry. Tiering requires looking at the site itself.

Why tiers beat a flat yes/no flag

A yes/no flag collapses everything into one bucket. Every supplier flagged "yes" for wildfire risk gets treated the same in a procurement review, whether their site sits in dense chaparral fuel load or on a cleared industrial lot with a quarter-mile of bare ground on every side. A flag like that protects you in an audit; it doesn't tell you which supplier to call first this quarter.

A tiered register lets you do what a flag can't: rank sites against each other. If you're deciding which three suppliers in a region need a contingency plan this quarter and which thirty can wait until next year, you need a list ordered by exposure, not a pile of identical checkmarks. The tier is what makes the register a ranking tool instead of a disclosure document.

It also changes the conversation with the supplier. "Your site is flagged for flood risk" invites a shrug. "Your site sits in our highest exposure tier for storm surge, based on elevation and distance from the coast" invites a real conversation about contingency planning, because the risk manager on the other end can see the basis for the call.

What should sit behind the tier

A tier without a basis is just an opinion with a label on it. The useful version of a tier comes with the imagery or terrain data that produced it: the elevation reading, the fuel load assessment, the slope angle, whatever sorted the site into that bucket in the first place. That's what lets you defend the ranking when a supplier pushes back, and it's what lets you re-run the assessment next year and see whether the tier moved.

This is the gap most supplier hazard registers have today. The hazard flag exists, usually copied from a regional dataset, but the site-specific basis for it doesn't. Supply Chain Hazard Mapping builds that basis in: each entry in the register comes with its tier, its hazard type, and the high-resolution imagery call behind it, built off your actual supplier addresses rather than a county-wide zone map.

If your current register is a column of flags with no basis behind them, it might be worth seeing what a numbered, tiered entry looks like instead.