IT, Software & Office Supplies carries a process risk of 24.5 out of 100 — the low band, and rank 33 of 33 sectors in the Tieron reference catalog. That figure is independent of location: it is what the work itself carries. Where you buy then moves the baseline from 17.9 in Denmark to 52.2 in Russia. Every figure below shows its weight and its source.
Sector process risk, 0–100, before location. Sector risk: 24.5.
| Sub-factor | Score | Relative |
|---|---|---|
| Process hazard | 20.0 | |
| Labour intensity & informality | 35.0 | |
| Environmental load | 25.0 | |
| Upstream depth (tiers below) | 10.0 | |
| Regulatory exposure | 40.0 |
Baseline risk for a supplier in this sector and that country, riskiest first. This is the sourcing-shift comparison: the same work, moved.
| Country | Baseline | Country composite | Band |
|---|---|---|---|
| Russia | 52.2 | 79.9 | Moderate |
| Nigeria | 52.0 | 79.5 | Moderate |
| Philippines | 50.7 | 77.0 | Moderate |
| Turkey | 50.3 | 76.1 | Moderate |
| Indonesia | 49.5 | 74.6 | Moderate |
| Egypt | 49.5 | 74.5 | Moderate |
| India | 49.4 | 74.2 | Moderate |
| Ukraine | 49.2 | 73.9 | Moderate |
| ChinaUFLPA | 48.4 | 72.3 | Moderate |
| Thailand | 48.0 | 71.4 | Moderate |
| Kenya | 45.9 | 67.2 | Moderate |
| Malaysia | 45.7 | 67.0 | Moderate |
| Vietnam | 45.6 | 66.7 | Moderate |
| Hong Kong | 45.4 | 66.3 | Moderate |
| Sri Lanka | 45.2 | 65.9 | Moderate |
| Saudi Arabia | 44.8 | 65.1 | Moderate |
| Serbia | 43.6 | 62.8 | Moderate |
| Qatar | 43.4 | 62.2 | Moderate |
| Mexico | 42.5 | 60.4 | Moderate |
| Nepal | 41.9 | 59.2 | Moderate |
| United Arab Emirates | 41.9 | 59.2 | Moderate |
| South Korea | 41.7 | 58.9 | Moderate |
| Hungary | 40.9 | 57.3 | Moderate |
| Morocco | 40.2 | 55.9 | Moderate |
| Greece | 39.6 | 54.7 | Moderate |
| South Africa | 38.9 | 53.4 | Moderate |
| Israel | 38.5 | 52.5 | Moderate |
| United States | 36.4 | 48.2 | Moderate |
| Romania | 36.1 | 47.8 | Moderate |
| Poland | 34.6 | 44.6 | Low |
| United Kingdom | 33.9 | 43.4 | Low |
| Belgium | 30.6 | 36.7 | Low |
| Italy | 30.5 | 36.6 | Low |
| Canada | 30.1 | 35.7 | Low |
| Spain | 29.1 | 33.7 | Low |
| Portugal | 28.6 | 32.8 | Low |
| Czechia | 28.3 | 32.1 | Low |
| Taiwan | 28.2 | 31.8 | Low |
| Switzerland | 28.0 | 31.6 | Low |
| France | 26.7 | 28.9 | Low |
| Japan | 26.1 | 27.6 | Low |
| Australia | 25.2 | 25.8 | Low |
| Singapore | 24.9 | 25.2 | Low |
| Netherlands | 24.4 | 24.3 | Low |
| Finland | 21.8 | 19.1 | Low |
| Ireland | 20.3 | 16.1 | Low |
| Germany | 19.9 | 15.2 | Low |
| Sweden | 19.5 | 14.5 | Low |
| Norway | 19.0 | 13.5 | Low |
| Denmark | 17.9 | 11.3 | Low |
Country and sector are 50% of Tieron’s risk axis by weight — the half that is knowable from public data alone. The rest is supplier-specific: conflict minerals exposure (weight 0.10), incident history (0.10) and information opacity (0.10). Two it, software & office supplies suppliers in the same country start from the number above and end up far apart. Impact — spend, substitution difficulty, continuity criticality — needs your own ledger.
Process risk, highest first — independent of where you buy.