Emerging risks: hidden dependencies in global supply chains
View Summary
Business continuity often depends on more than the resilience of a company's own facilities. It also relies on suppliers, infrastructure, and logistics networks that keep supply chains moving. Yet many companies still assess physical risk too narrowly. Our analysis of public corporate disclosures reveals this gap: 43% of Fortune 500 Europe companies report assessing physical risk to their own facilities, but only 7% publicly disclose extending such assessments to supplier facilities, and fewer than 2% disclose assessing the wider infrastructure they rely on. Within the analysed public corporate disclosures, this suggests a growing visibility gap in business continuity risk as climate risk, production concentration and interconnected infrastructure increase supply chain dependencies. Advanced insurer tools can model these risks, but only with high-quality data on supplier, infrastructure and logistics dependencies.
Supply chains can amplify business interruption severity
For a business, a physical damage event – such as a flood or a fire – can cause operational downtime and potential business interruption (BI) losses. Physical damage at a covered third-party location, such as a supplier, may trigger contingent business interruption (CBI) cover, depending on policy wording.1 However, the duration of recovery can also be affected by broader supply chain conditions that are not necessarily insured on a standalone basis. As noted in sigma 2/2026, the Middle East conflict has been the fourth major global supply shock in six years, highlighting the wider disruption environment in which insured BI or CBI events may now unfold.2 Infrastructure failures, logistics bottlenecks, shipping delays or trade restrictions may delay repairs, replacement equipment or inputs, thereby compounding the severity of an insured BI or CBI event.
Table 1: Supply chain failure modes and illustrative BI/CBI impacts
Limited visibility into supply-chain accumulation risks
An analysis of public corporate disclosures reveals that many BI and CBI exposures remain unmapped and potentially underestimated.3 We found that only 43% of Fortune 500 European companies report conducting physical risk assessments of their own facilities. Dependencies on critical suppliers, utilities, logistics networks and digital infrastructure can be even less visible: just 7% of analysed companies report extending that scrutiny to their suppliers' facilities. Only one in six of those assessing their own operations report looking upstream. Consequently, many risks may remain unidentified until a disruption occurs.
Figure 1: Assessment of physical risk disclosures across Fortune 500 Europe public corporate reports
Critical dependencies often sit beyond the insured location itself or even beyond the location of its suppliers. For example, buildings with no direct flood inundation can face several days of outage due to flooding at supplying power substations. Our analysis shows that less than 2% of companies report assessing the wider infrastructure they depend on.4
Mapping these dependencies for specific locations is key. Two commercial properties connected to the same power substation can experience very different numbers of downtime days when affected by windstorms due to differences in their infrastructure dependencies. Power delivery to the first property may be through overhead lines while the second gets power from underground lines, not vulnerable to the wind peril.
View Summary
Hurricane Milton disrupted several infrastructure systems after making landfall on Florida's west coast in 2024. At peak, 28% of Florida's electricity customers lost power and Port Tampa Bay ceased all vessel traffic operations.5 6 These disruptions matter most for facilities that rely on continuous power. Data centres can be highly sensitive to grid instability: a single voltage fluctuation could cause dozens to disconnect simultaneously.7 8
During Milton, utilities followed a defined restoration hierarchy. They prioritised essential services and public safety before restoring power to businesses and residential customers.9 A facility's place in this hierarchy depends on its classification and the utility's restoration plan, not on the severity of its own property damage. This highlights the importance of assessing infrastructure dependencies before a risk event occurs.
Where visibility varies: a sector perspective
The depth of preparedness varies significantly by sector (see Table 2). Chemicals sector leads across multiple dimensions, with 86% of companies acknowledging extreme weather vulnerability and 57% identifying concrete mitigation measures. Motor vehicles and parts (19%) and industrials (16%) lead in supplier facility assessments, likely reflecting lessons from events such as the 2021 Japanese chip plant fire that halted a third of global automotive microcontroller production and disruption during the Russia–Ukraine war to neon gas and wiring harness supplies.10
Table 2: Fortune 500 Europe physical risk disclosure by sector and assessment scope (selected sectors)
Climate events as a supply chain risk factor
As climate change intensifies events such as floods and heatwaves, climate-related risks to supply chains including the likelihood and impact of disruptions, are expected to grow. Understanding where business locations are exposed to these evolving hazards may benefit effective risk management and long-term resilience.
The case of semiconductor manufacturing in Taiwan illustrates this challenge. Taiwan is the global epicentre of semiconductor manufacturing, making its hubs critical nodes in technology supply chains. These facilities face converging climate risks: in 2021, Taiwan's worst drought since 1964 forced a 15% reduction in water supply to major manufacturing hubs.11 In July 2025, parts of southern Taiwan received over a year's worth of rainfall in a single week, flooding facilities including TSMC's Chiayi plant. 12
Figure 2: Projected increase in flood losses at the Southern Taiwan Science Park, three climate change scenarios
Swiss Re's flood models show that many areas in the Southern Taiwan Science Park lie within flood zones, with flood losses at key semiconductor manufacturing hubs projected to increase by 4% by 2030 and 36% by 2050 under the middle-of-the-road climate change scenario (SSP2–4.5, Swiss Re downscaled CMIP6 model ensemble).
In addition, the loss of use of flooded or landslide-obstructed access roads could delay the movement of raw materials and finished products, further disrupting supply chains. Heatwave days are also projected to increase from approximately four to five per year to 52 to 68 per year by 2050 for these same locations (SSP2–4.5), potentially compromising cooling systems critical to semiconductor production. 13
Closing data gaps in dependency modelling
Advanced tools can now model downtime and infrastructure dependencies at scale.14 15 However, the models are only as good as the underlying input data, and our disclosure analysis shows that many companies still lack the supplier, infrastructure and logistics data needed to assess these risks fully. For insurers, the emerging risk lies in hidden concentrations and dependencies that may only become apparent after a loss. Better mapping of these dependencies can improve accumulation management and support long-term resilience.
Further Information
References
[1] Contingent business interruption (CBI) is an insurance extension that covers lost revenue and extra expenses when operations are halted due to physical damage suffered by a key third party, such as a supplier or customer.
[2] sigma 2/2026: Shock absorbers in a fragmenting world, Swiss Re Institute
[3] We refer to physical risk as direct damage to assets and indirect disruptions to operations caused by climate events. The analysis covers reporting year 2024 public annual and sustainability reports of all Fortune 500 Europe companies. Physical risk statements and related disclosures were assessed across five dimensions: acknowledgement of extreme weather vulnerability, physical risk assessment of own facilities, identification of concrete mitigation measures, physical risk assessment of supplier facilities, and physical risk assessment of infrastructure dependencies. Each company was classified as 'Yes', or 'Not disclosed' for each dimension. Companies were grouped by sector to identify patterns across industries. The analysis is based entirely on public disclosures, and focuses on Europe, as climate-related financial disclosure adoption has been more advanced in Europe than in other regions. The TCFD framework is relevant as it explicitly recommends that organisations disclose the amount and extent of assets or business activities vulnerable to physical risks. This provided a consistent basis for assessing disclosure depth across the sample. Public disclosures do not allow us to test whether Fortune 500 Europe companies with weaker disclosure of dependency mapping experience greater losses or longer recovery.
[4] Fortune 500 Europe 2024, Fortune Media IP Limited, 2026.
[5] Hurricane Milton Situation Report #1, U.S. Department of Energy, 2024.
[6] Hurricane Milton nears landfall on Florida’s west coast, disrupts energy infrastructure, U.S. Energy Information Administration, 2024.
[7] Virginia narrowly avoided power cuts when 60 data centers dropped off the grid at once, DCD, 2025.
[8] Big Tech’s data center boom poses new risk to US grid operators, Reuters, 2025.
[9] Hurricane Milton Situation Report #1, U.S. Department of Energy, 2024.
[10] De-risking supply chains: a deep dive into the automotive industry, Swiss Re, 2023.
[11] How Water Scarcity Threatens Taiwan’s Semiconductor Industry, The Diplomat, 2024.
[12] Torrential rain lashes southern Taiwan, leaving five dead and over 5,900 evacuated, The Straits Times. 2025.
[13] Climate Change Risk: Impact on Taiwan’s Semiconductor Manufacturing Industry, Swiss Re Corporate Solutions, 2026.
[14] BCG, Swiss Re and One Concern on Climate Risk, Bloomberg Live, 2023.
[15] Risk Data Solutions, Swiss Re, 2026.