Why Resilience Scoring Became the Bridge Between Operations and Insurance in 2026
Indian corporates through 2020 to 2023 treated supply chain risk management and supply chain insurance as parallel but largely disconnected disciplines. The operations team maintained supplier scorecards focused on delivery performance, quality, and price. The procurement team maintained supplier contracts with standard liquidated damages and termination provisions. The insurance team maintained contingent business interruption (CBI) cover with named-supplier schedules that often dated back several renewal cycles without active refresh. The three workstreams operated on different cadences, different data sources, and different success metrics.
The events of 2020 to 2025 forced an integration. The COVID-period logistics disruptions, the 2021 semiconductor shortage cascading through automotive production, the 2022 to 2023 specialty chemicals supply disruptions, the 2024 dairy sector ransomware event with downstream cold-chain impact, and the 2025 monsoon and cyclone disruptions affecting Tamil Nadu and Andhra Pradesh manufacturing all demonstrated the gap between supply chain risk reality and insurance programme response. Multiple Indian corporates filed CBI claims through 2022 to 2025 that were denied or sub-limited because the affected supplier was not on the named-supplier schedule, because the disruption did not meet the policy's physical damage trigger requirement, or because the indemnity period had expired before the actual operational recovery completed.
The 2026 response across major Indian corporates is the adoption of supply chain resilience scoring frameworks that operate as the bridge between operations data and insurance programme design. The scoring framework maps the supplier ecosystem in detail, scores each supplier on multiple dimensions of operational and financial resilience, identifies the supplier-level exposures that the insurance programme should cover, and provides the recurring data exchange that supports both insurance procurement and operational risk management.
The driving forces include the explicit underwriter request for resilience scoring data on CBI submissions, the RBI and SEBI expectations on operational resilience reporting under the respective frameworks (RBI Master Direction on Outsourcing of IT Services 2023, SEBI BRSR Core requirements), the insurance broker advisory practice that has matured around resilience scoring methodology, and the corporate governance expectation at board risk committee level that supply chain resilience is documented and monitored.
Scoring Methodology: The Multi-Dimensional Framework
The 2026 standard resilience scoring framework for Indian corporates evaluates each supplier across multiple dimensions that together produce a composite resilience score. The dimensions and their typical weighting are described below, recognising that specific weightings vary by corporate and by sector.
Operational resilience dimension (typical weight 25 to 35 percent) evaluates the supplier's ability to maintain operations under stress. The sub-criteria include: documented business continuity plan with annual testing; redundant production capacity at alternative sites; documented disaster recovery procedures for IT and operational systems; cross-trained workforce capability; documented supplier-of-suppliers (tier-2 and tier-3) dependency analysis. The data sources include direct supplier questionnaire response, on-site assessment where conducted, and third-party verification where available.
Financial resilience dimension (typical weight 20 to 30 percent) evaluates the supplier's financial capacity to weather disruptions. The sub-criteria include: credit rating (where available from CRISIL, ICRA, CARE, India Ratings, or international agencies); debt-to-equity and liquidity ratios; profitability trend; capital expenditure capacity; access to bank financing and trade credit. The data sources include credit reports, financial statement analysis where the supplier shares accounts, and trade credit insurer assessments where the corporate maintains trade credit cover on the supplier.
Geographic and infrastructure dimension (typical weight 15 to 25 percent) evaluates the supplier's exposure to location-specific hazards. The sub-criteria include: physical site exposure to flood, cyclone, seismic, and other natural hazards; utility infrastructure reliability (grid power, water, transport access); proximity to alternate transport modes for output dispatch; concentration of supplier production at a single site versus diversified across multiple sites; political and regulatory stability at the production location. The data sources include geocoded site information, hazard map overlays, infrastructure database queries, and political risk assessments.
Cyber and technology resilience dimension (typical weight 10 to 20 percent) evaluates the supplier's cyber security posture and technology dependency. The sub-criteria include: documented cyber security framework with reference to ISO 27001 or equivalent; documented incident response and recovery procedures; vendor management for the supplier's own IT service providers; technology obsolescence risk in production systems; cyber incident history with remediation. The data sources include supplier questionnaire response, third-party cyber assessment scores where available, and shared incident logs where the supplier provides them.
Relationship and concentration dimension (typical weight 10 to 20 percent) evaluates the supplier-corporate relationship and the corporate's concentration risk to the supplier. The sub-criteria include: percentage of supplier output dependent on the corporate (and inverse, percentage of corporate input dependent on the supplier); contract duration remaining; contract terms on capacity allocation during shortage; documented alternative supplier qualification status; supplier ownership and management stability. The data sources include internal procurement records, contract documentation, and supplier disclosure of customer concentration.
The composite score combines the dimension scores into a single resilience rating, typically expressed on a 1 to 5 or A to E scale. The composite score becomes the basis for tier segmentation (described below) and for the CBI named-supplier schedule prioritisation.
The scoring cadence in 2026 best practice is annual for the full supplier base with interim refresh for suppliers experiencing material events (financial distress, operational incidents, ownership change, geographic exposure event). The annual refresh aligns with the corporate's insurance renewal cycle so that the updated scoring is available at the time of CBI placement discussion.
Supplier Tier Mapping: From Tier-1 Direct to Tier-3 Sub-Component
Effective resilience scoring requires explicit tier mapping of the supplier ecosystem, distinguishing direct suppliers from upstream suppliers in the supply chain. The 2026 standard distinguishes three tiers, though some corporates extend the analysis to tier-4 and beyond for the most critical inputs.
Tier-1 suppliers are the corporates direct suppliers who deliver inputs (components, materials, services) directly to the corporate's operations. The full tier-1 population for a large Indian corporate typically numbers 500 to 5,000 suppliers depending on sector and scale. The tier-1 population is segmented by spend, by criticality, and by substitutability. The critical tier-1 suppliers (typically 10 to 50 suppliers representing 60 to 80 percent of total spend on critical inputs) receive intensive resilience scoring with annual on-site assessment. The standard tier-1 suppliers receive lighter-touch scoring through questionnaire response and standard data sources without on-site assessment. The occasional tier-1 suppliers receive minimal scoring with reliance on standard credit and operational data.
Tier-2 suppliers are the suppliers of the corporates tier-1 suppliers. The tier-2 mapping requires tier-1 supplier disclosure of their own critical suppliers. The depth of tier-2 mapping in 2026 practice varies significantly across corporates, with the most mature programmes mapping 50 to 200 critical tier-2 suppliers and less mature programmes mapping only a handful. The tier-2 scoring uses simpler methodology than tier-1 because direct access to tier-2 suppliers is limited.
Tier-3 suppliers are the suppliers of tier-2 suppliers, typically the sub-component and raw material providers at the upstream end of the supply chain. Tier-3 mapping is limited for most Indian corporates with only the most strategically critical sub-components mapped in detail. The 2024 to 2025 semiconductor shortage demonstrated the importance of tier-3 visibility for sectors dependent on chips and electronic components, with several Indian corporates initiating dedicated tier-3 mapping programmes for their electronics-dependent input categories.
Cross-cutting categories add complexity to the tier framework. Logistics providers at multiple tiers carry their own resilience characteristics that affect every supplier shipment. Utility providers (power, water, telecommunications) affect supplier operations across the tier structure. Government agencies and regulators at multiple tiers can produce disruption through policy change, permit issues, or enforcement action. Financial institutions providing supplier finance can affect supplier liquidity through their own decisions.
The mapping output is a directed graph showing the corporate's input dependencies through the tier structure with each node annotated by its resilience score and each edge annotated by the dependency strength. The graph visualisation supports both operational risk management and insurance programme design by making the dependency structure visible to decision-makers.
The insurance implications of the tier mapping are significant. The CBI policy traditionally responds to named suppliers, with the named-supplier schedule typically limited to tier-1 direct suppliers. The 2026 placement practice for major Indian corporates increasingly extends the named-supplier schedule to include critical tier-2 suppliers, with insurers accepting the extension subject to the resilience scoring documentation supporting the inclusion. The tier-3 inclusion remains rare but is appearing in selected placements where the tier-3 dependency is documented and material.
The contingent BI sub-limits by supplier are increasingly differentiated by tier and by resilience score. A critical tier-1 supplier with a high resilience score receives full sub-limit; a critical tier-1 supplier with a low resilience score may receive a reduced sub-limit or specific exclusions; a critical tier-2 supplier receives sub-limits calibrated to the tier-2 risk profile. The differentiated sub-limit structure reflects the underwriter's risk appetite by supplier rather than the historical practice of uniform sub-limits across the schedule.
The CBI Named-Supplier Schedule: Calibrating to the Scoring Output
Contingent business interruption (CBI) is the insurance line most directly affected by supply chain resilience scoring. The CBI policy provides BI cover for losses arising from physical damage at a named supplier's premises that disrupts supply to the insured corporate. The named-supplier schedule defines which suppliers are covered, with sub-limits and indemnity periods specified per supplier or per supplier group.
The traditional CBI named-supplier schedule for Indian corporates was typically constructed by listing the top 10 to 30 tier-1 suppliers by procurement spend, with uniform sub-limits applied across the schedule. The schedule was refreshed at annual renewal but often through perfunctory review rather than structured analysis. The result was a CBI programme that responded to losses at the largest suppliers but missed losses at smaller-spend suppliers that were nonetheless critical to operations.
The 2026 calibrated CBI named-supplier schedule uses the resilience scoring output to inform inclusion, sub-limit, and indemnity period decisions per supplier. The methodology proceeds through several steps.
First, the inclusion threshold is set based on a combination of supplier criticality (operational disruption impact from supplier failure) and resilience score (lower scores indicating higher loss probability). Suppliers above a threshold criticality regardless of spend are included; suppliers below the threshold criticality may be included if resilience score is low. The result is a schedule that prioritises high-impact dependencies over spend concentration.
Second, the sub-limit per supplier is calibrated to the BI impact of supplier failure. The calibration uses the operational analysis (how long the corporate can continue operations after supplier failure, alternative supplier ramp-up timeline, contractual liability exposure to downstream customers) to size the sub-limit. Suppliers with longer impact duration and higher impact magnitude receive higher sub-limits. The sub-limit calibration is documented in the placement file and reviewed at each renewal.
Third, the indemnity period per supplier is calibrated to the realistic restoration timeline. A tier-1 supplier with documented business continuity plans and tested disaster recovery procedures restores faster than a tier-1 supplier without such planning, supporting shorter indemnity period. A tier-2 supplier in a remote location with limited alternative supplier options requires longer indemnity period. The differentiated indemnity periods are documented in the policy through specific endorsement language per supplier or per supplier group.
Fourth, the trigger language per supplier is calibrated to the realistic disruption mechanisms. The standard CBI trigger requires physical damage at the named supplier's premises caused by an insured peril. The 2026 placement practice for selected critical suppliers extends the trigger to include cyber-induced disruption, regulatory action, and other named non-physical perils where the underwriter accepts the extension. The extended trigger is documented through specific endorsement with the additional perils and the conditions for response specified.
The CBI premium for the calibrated programme typically runs at a level between the historical perfunctory programme and a fully expansive CBI programme that would attempt to address all conceivable supplier exposures. The calibrated approach achieves better coverage on the actual exposure profile at modest premium increase relative to the historical programme.
The broker role in the calibrated CBI placement is materially expanded relative to traditional placement. The broker leads the supplier mapping coordination with the corporate's procurement and operations teams, conducts the resilience scoring data exchange with the underwriter, drafts the differentiated wording per supplier or supplier group, and manages the underwriter's information requests through the placement process. Specialist supply chain insurance brokers at Marsh India, Aon India, WTW India, and Howden India have built dedicated practice teams for this work through 2023 to 2026.
Trade Credit and Parametric Overlays: The Other Insurance Lines
Supply chain resilience scoring affects insurance lines beyond CBI. Trade credit insurance and parametric supply chain covers both integrate with the scoring framework in important ways.
Trade credit insurance covers the corporate's exposure to non-payment by customers. The line is most material for corporates with significant B2B sales on credit terms, including manufacturers selling to distributors, chemicals and materials suppliers selling to industrial customers, food and beverage producers selling to retail chains, and exporters with overseas customers. The Indian trade credit insurance market is served by ECGC for export-focused cover and by commercial trade credit insurers including Coface, Atradius, Euler Hermes (Allianz Trade), New India Assurance, Tata AIG, and ICICI Lombard for domestic and export cover.
The trade credit cover is structured through buyer-by-buyer underwriting where the insurer assesses each named buyer for creditworthiness and assigns a credit limit, or through portfolio underwriting where the insurer assesses the corporate's overall receivables portfolio. The resilience scoring framework, originally developed for supplier-side analysis, increasingly extends to customer-side analysis with the same dimensions applied (operational resilience, financial resilience, geographic and infrastructure, cyber and technology, relationship and concentration). The integrated customer scoring informs both the trade credit insurance procurement and the operational decisions on customer credit terms, credit limits, and customer relationship management.
The buyer underwriting data exchange with the trade credit insurer is increasingly digitised through API-based connectivity. The corporate's accounts receivable system feeds buyer-level exposure data to the insurer's underwriting platform, the insurer's credit assessment outputs feed back to the corporate's credit decisioning process, and the bilateral data exchange enables real-time credit limit management. The 2026 placement practice for major Indian corporates with material trade credit exposure increasingly assumes this digital integration.
Parametric supply chain covers provide pre-defined payout on the occurrence of a trigger event that affects the corporate's supply chain. The trigger options include port throughput indices (for corporates dependent on specific port operations), regional climate indices (for corporates dependent on specific geographic regions), commodity price indices (for corporates exposed to specific input cost movements), and composite indices that combine multiple measurements.
The Indian parametric supply chain market has matured through 2024 to 2026 with capacity from AXA Climate, Swiss Re Corporate Solutions, Munich Re, Hannover Re, Descartes Underwriting, Floodbase, and selected Lloyd's specialty syndicates providing capacity through GIFT City and direct international placement channels. Indian domestic capacity is more limited but growing, with selected non-life insurers developing parametric capability for specific trigger types.
The placement structure for parametric supply chain covers typically uses a domestic Indian insurer fronting the placement with international reinsurance support. The trigger definition, the basis risk acceptance, and the payout structure are negotiated case by case rather than through standard market wording. The placement cycle for parametric supply chain placements runs 12 to 24 weeks from initial submission to bound cover.
The integration between parametric and CBI mirrors the integration between parametric and property BI discussed in cascade risk scenario planning. The 2026 best practice uses parametric as a complement to CBI rather than as a replacement, with the parametric sized to fund the immediate cascade response cost (alternative supplier mobilisation, expedited logistics, customer relationship management) and the CBI sized to fund the verified BI loss through standard loss adjustment timelines. The non-overlap wording between parametric and CBI prevents double recovery while ensuring no coverage gap.
The commercial-marine integration is the further consideration for corporates with significant import or export exposure. Marine cargo insurance, transit insurance, marine open cover programmes, and political risk insurance for trade routes all integrate with the supply chain resilience framework. The combined commercial and marine insurance portfolio for a major Indian corporate with international trade can run to multiple insurance lines, multiple insurance markets, and substantial premium spend, requiring integrated programme management to avoid coverage gaps and double cover.
Data Exchange and Underwriter Engagement: The Operational Workflow
The supply chain resilience scoring framework operates as an ongoing data flow rather than a periodic exercise. The data exchange between the corporate, the insurance broker, and the underwriter has become the operational backbone of the integrated programme.
The corporate-internal data flow begins with the procurement system feeding supplier master data and spend data to the resilience scoring platform. The operations system feeds operational dependency data including supplier-criticality assessments and BI impact estimates. The finance system feeds supplier financial data including payment behaviour and credit terms. The risk management system feeds the consolidated resilience score and the related underwriting submission inputs.
The corporate-broker data exchange typically operates through a dedicated data room or platform that the broker maintains for the corporate. The platform houses the supplier resilience scoring outputs, the operational analysis on supplier dependency, the financial analysis on supplier creditworthiness, and the historical claims experience by supplier. The platform is refreshed by the corporate on a defined cadence (typically quarterly with annual deep refresh) and accessed by the broker for placement and renewal work.
The broker-underwriter data exchange uses the broker's data room with controlled access by the underwriter. The underwriter accesses the relevant data subset (typically the supplier mapping, the resilience scoring, the historical claims, and the placement-specific analysis) without accessing the corporate's sensitive operational data beyond what is needed for underwriting. The data access is logged and time-limited.
The placement workflow through the data exchange operates on a cycle aligned to the corporate's renewal calendar. The pre-submission preparation runs 8 to 12 weeks before renewal date with the corporate refreshing the scoring data and the broker preparing the placement materials. The submission to the lead underwriter runs 6 to 8 weeks before renewal with the underwriter conducting the data review and engineering survey scheduling. The market sounding and excess layer placement runs 4 to 8 weeks before renewal. The terms negotiation and binding runs in the final 2 to 4 weeks.
The engineering survey at critical supplier locations is increasingly part of the placement workflow for major CBI placements. The survey is conducted by the underwriter's engineering team or by a specialist consultancy with the supplier's cooperation. The survey output feeds the underwriter's risk assessment and supports the sub-limit and indemnity period calibration. Supplier cooperation with engineering survey is increasingly a contractual requirement in the supplier agreement, recognising that the survey is part of the corporate's risk management programme.
The renewal review with the broker and underwriter typically includes a structured discussion of the year's experience, the changes in the supplier base and the scoring outputs, the proposed changes to the CBI named-supplier schedule, and the proposed changes to sub-limits and indemnity periods. The renewal review document becomes the basis for the renewal placement materials and supports the corporate's internal documentation of the insurance programme decisions.
The post-renewal communication to internal stakeholders documents the programme structure, the named-supplier schedule, the sub-limits, the indemnity periods, the trigger conditions, and the claims notification procedures. The communication ensures that the operational teams understand which suppliers are covered and how to engage the insurance programme when a covered event occurs. Corporates with mature programmes typically conduct annual claims-preparedness drills on selected covered scenarios to test the response readiness.
The 2026 Placement Implications and Forward Practice
The integration between supply chain resilience scoring and insurance programmes has consequences for the 2026 placement cycle that Indian corporate insurance buyers and their brokers should understand and prepare for.
The CBI placement pricing in 2026 reflects the underwriter's appetite for differentiated risk based on resilience scoring. Corporates with documented scoring and strong supplier resilience can secure CBI cover with broader scope and lower premium than corporates without scoring documentation. The historic pattern of uniform CBI pricing across the corporate book is fading in favour of differentiated pricing aligned to the underwriter's assessment of the supplier portfolio risk.
The CBI capacity for the largest placements is sourced through a combination of domestic Indian capacity and international reinsurance support, with GIFT City structures supporting the international placement portion. The capacity available for sophisticated CBI placements with extended named-supplier schedules and differentiated terms has expanded through 2024 to 2026 as more underwriters have developed appetite for the segment. The capacity available for unstructured CBI placements without scoring documentation has compressed as underwriters tighten requirements.
The trade credit placement pricing similarly reflects the underwriter's assessment of the buyer portfolio risk through the resilience scoring framework. Corporates with documented customer scoring and strong customer creditworthiness can secure trade credit cover with higher buyer limits and lower premium than corporates without scoring. The integration between trade credit underwriting and the corporate's internal credit decisioning supports the operational and insurance procurement decisions in an aligned manner.
The parametric supply chain placement continues to grow with capacity from international reinsurance markets through GIFT City structures. The trigger calibration and the basis risk acceptance are negotiated case by case. The placement cycle is shorter than CBI but the wording precision requirement is higher because the trigger language directly affects payout determination.
The forward practice through 2027 to 2030 sees several developments. First, the digital data exchange between corporate, broker, and underwriter is likely to mature with standardised data schemas, API-based connectivity, and real-time exposure monitoring. Second, the scoring methodology is likely to standardise across the major brokers with sector-specific adaptations, supporting cross-market benchmarking and underwriter comparability. Third, the regulatory expectation on supply chain resilience documentation under BRSR Core, RBI operational resilience frameworks, and IRDAI cyber security guidelines is likely to converge, simplifying the corporate compliance burden across multiple frameworks. Fourth, the insurance market response to the documented resilience scoring is likely to differentiate further between corporates with sophisticated programmes and corporates with basic programmes, with the differentiation appearing in both pricing and capacity availability.
The practical guidance for Indian corporates entering the 2026 renewal cycle without established resilience scoring is to begin with the basic framework on the critical tier-1 supplier population (typically 10 to 50 suppliers representing 60 to 80 percent of critical input spend), with the scoring methodology established at a manageable scope before extending to broader supplier coverage and tier-2 mapping. The broker should be engaged early in the scoping discussion because the broker's capability and the underwriter relationships drive what is achievable in the placement.
The practical guidance for established programmes entering the 2026 renewal is to use the renewal cycle as an opportunity to refine the differentiated CBI sub-limits and indemnity periods, to extend the named-supplier schedule to documented critical tier-2 suppliers, and to integrate parametric supply chain overlays for the most cascade-exposed corridors. The renewal cycle also provides the opportunity to integrate trade credit and CBI placements where they have historically been separately managed, with the integrated programme reducing administrative cost and improving the corporate's insurance market positioning.