Risk assessment and management
In our assessment of risk we look at specific environments, circumstances, events, business operations
and imports, assessing which of these, alone or in combination, have the greatest potential to cause
noncompliance and disrupt IBM’s supply chain. This process forms a basis for deciding how we should
manage the risk and for ensuring that controls are in place to mitigate the risk of noncompliance and
disruption.