Emma is reviewing third-party risks to her organization, and Nate, her organization’s procurement officer, notes that purchases of some laptops from the company’s hardware vendor have been delayed due to lack of availability of SSDs (solid-state drives) and specific CPUs (central processing units) for specific configurations. What type of risk should Emma describe this as?

Emma should categorize this as a supply chain risk. When organizations cannot get the systems, equipment, and supplies they need to operate, it can have a significant impact on their ability to conduct business. That could create financial risk, but financial risk is not the direct risk here. There is no indication that the vendor will not support the systems, nor is there any information about whether there is an integration issue in the description.