When managing risk, creating awareness of risk internal and external exposures is the first step of the VCRM/SCRM/ERM journey - but it's only the first of several necessary steps.

All events and threats, external and internal, must be evaluated in the context of your own granular organizational supply chain and value chain data in order to qualify and quantify the impacts.

Risk priority is unique to every organization, and even to its subordinate parts, based on the value at risk - revenue, profit, budget, mission, and even intelligence value. 

"Resilience" is too often thought of as how fast you react to and recover from events... but truly intelligent resilience is achieved by simulating and planning for risks before they happen.

Engage people from across the organization in the value chain and supply chain risk management process - because risks that affect operations and organizational value can arise in any organizational function or location.

Tools are not enough - you need to establish a risk management methodology and retain information that lets you react faster and be more proactive in an increasingly risk-filled world.