According to the risk categories and the virtual supply chain, the relevant risks are process and control risks as well as supply risks. Within the company, long‐term production downtimes (1), IT breakdowns (2) and short‐term production downtimes (3) are critical risks. Long‐term production downtimes last longer than three days whereas short‐term downtimes are everything between a couple of hours to three days. On the supply side, the company is facing primarily capacity variances/bottlenecks on the supply market (4), dependency on suppliers (5) and delayed deliveries (6). Dependencies on suppliers can be caused by single sourcing as well as by a lack of alternative suppliers (e.g. monopolies).