Second-Source Review¶
Sourcing review — instantiates Dependency-Capture Exit Design
Qualifies a genuine second source for a captured function so the organization is never captive to a single provider.
A dependency has real bite only when there is nowhere else to go — one supplier, one vendor, one shop that can make the part or do the work. Second-Source Review attacks that directly by finding and qualifying a genuine alternative provider, so the buyer holds a credible option to switch. Its defining move is establishing an alternative that is actually usable, not nominal: it identifies where the sole-source chokepoint sits, then puts a candidate second source through the same qualification the incumbent passed — the part meets spec, the vendor can meet volume, the switch would really work under load. It is about provider substitutability: the existence of a proven Plan B. It does not restructure the incumbent's incentives or price the outcome; it makes sure a second door exists and opens.
Example¶
An aerospace manufacturer buys a critical flight-control actuator from a single specialist supplier. The supplier knows it, and its prices, lead times, and terms reflect a captive customer; a strike or a bankruptcy there would ground a production line. Engineering commissions a Second-Source Review. It first maps precisely where the sole-source dependence lives — this one actuator, its proprietary seal design, and the supplier's exclusive test fixture — distinguishing the genuinely hard-to-source element from the parts that are already multi-sourced.
Then it qualifies a candidate: a second vendor builds the actuator to the same specification, and the review subjects it to the same airworthiness qualification the incumbent's part passed — vibration, thermal cycling, endurance — and confirms the vendor can hit required rate. This mirrors a classic industrial pattern: when IBM chose the Intel 8086 family for its PC, it required a second manufacturing source, which is why Intel licensed the design to AMD.[n1] The review's product is not a purchase but a proven option — a qualified alternative the manufacturer can turn to, which alone reshapes every negotiation with the incumbent.
How it works¶
- Locate the true chokepoint. The review maps the dependency to find where single-sourcing actually binds — the specific part, credential, or capability with no alternative — rather than treating a whole relationship as monolithic.
- Identify candidate alternatives. It scans for providers who could plausibly meet the need, including ones the incumbent's framing has kept invisible.
- Qualify against the real bar. A candidate is only a second source once it passes the same acceptance the incumbent meets — the part to spec, the capacity to volume, the switch demonstrated — so the alternative is proven, not hypothetical.
- Verify independently that the need is met. Qualification is judged against the underlying requirement, assessed apart from the incumbent, so "only our supplier can do this" claims are tested rather than assumed.
Tuning parameters¶
- Qualification depth — paper capability vs. sample acceptance vs. a live dual-run under load. Deeper qualification makes the option real but costs time and money; shallow qualification yields a "second source" that fails on first use.
- Readiness posture — a warm, continuously-maintained alternate vs. a cold, identified-but-untested one. A warm second source switches fast but costs to keep ready; a cold one is cheap but slow and risky when finally needed.
- Independence of the alternative — how much the candidate shares suppliers, tooling, or staff with the incumbent. True independence gives real resilience; a "second source" reliant on the same upstream is a single point of failure in disguise.
- Spec ownership — whether the buyer controls the specification and test data the second source needs. Buyer-owned specs make qualification possible; incumbent-owned ones can quietly block any alternative.
When it helps, and when it misleads¶
Its strength is that a credible alternative changes the game even if it is never used: it caps the incumbent's leverage on price, terms, and reliability, and it removes the existential risk of the single provider failing. It converts "we have no choice" into "we have a proven choice we are choosing not to exercise yet," which is the whole difference between captivity and a relationship.
Its failure mode is the paper second source — named in a resilience plan, never actually qualified — that collapses the moment it is needed, having lulled everyone into thinking the risk was covered. A subtler trap is a second source that depends on the same upstream input, tooling, or key person as the first, so both fail together. The classic misuse is letting the incumbent define or control the qualification, ensuring no alternative ever quite passes. The guard is to qualify against a buyer-owned spec, insist on genuine upstream independence, and periodically exercise the alternative so it stays real rather than notional.
How it implements the components¶
substitute_or_second_source_path— its core product: a qualified, proven alternative provider the buyer can switch to, not merely a name on a list.dependency_pathway_map— it locates exactly where single-sourcing binds, separating the genuinely captive element from what is already substitutable.independent_need_verification— it tests the candidate against the underlying requirement, judged apart from the incumbent, so inflated "only we can do this" claims are checked.
It does not tie the provider's payment to durably resolving the need (durable_resolution_metric) — that's Outcome-Based Contract; this review proves an alternative exists and works, whereas the contract re-prices what the provider is paid for.
Related¶
- Instantiates: Dependency-Capture Exit Design — supplies the proven alternative that removes single-provider captivity.
- Consumes: Independent Needs Assessment — its definition of the true need is the spec a candidate must be qualified against.
- Sibling mechanisms: Capability Handoff Checklist · Dependency-Reduction Scorecard · Exit-Readiness Review · Fixed-Term or Sunset Mandate · Independent Needs Assessment · Open Documentation Package · Outcome-Based Contract · Post-Exit Dependency Audit · Rotation or Term Limit
Editorial Notes¶
Form Classification¶
Form family: Assessment, Review & Assurance
Rationale: Second-Source Review operates as a bounded evaluation of existing evidence or work that produces a finding or disposition because it qualifies a genuine second source for a captured function so the organization is never captive to a single provider.
Independent corroboration: The frozen evidence defines Second-Source Review as 'Qualifies a genuine second source for a captured function so the organization is never captive to a single provider', so its operative form is Assessment, Review & Assurance.
Nearest alternative: Decision, Gate & Allocation — Second-Source Review includes features of a case-specific gate, selection, routing, prioritization, or resource disposition, but its defining operation is a bounded evaluation of existing evidence or work that produces a finding or disposition.
Review outcome: Independent reviewer agreement; medium confidence.
Origin Attribution¶
Primary origin: Logistics & Supply Chain Management
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Qualifying an independent supplier against capacity, quality, compatibility, and continuity criteria is a supply-chain resilience practice. NIST and GAO explicitly discuss second-source qualification and supply assurance; engineering and management govern technical equivalence and approval.
Related originating lineages:
- Engineering & Design — engineering_design contributes reliability, instrumentation, tolerances, verification, and systems integration to this mechanism's defining operation—Qualifies a genuine second source for a captured function so the organization is never captive to a single provider—without displacing the selected primary historical lineage.
- Organizational & Management Science — Vendor governance materially assigns accountability for source qualification.
- Security Studies & Intelligence Analysis — security_intelligence contributes threat modeling, least privilege, integrity, and adversarial assurance to this mechanism's defining operation—Qualifies a genuine second source for a captured function so the organization is never captive to a single provider—without displacing the selected primary historical lineage.
- Systems Thinking & Cybernetics — Systems thinking, feedback control, and cybernetics supplies a parallel or contributing lineage for the mechanism's defining operation: qualifies a genuine second source for a captured function so the organization is never captive to a single provider.
Review resolution: The blind reviewers disagree on primary lineage (logistics_supply_chain versus organizational_management). Authoritative or primary research supports logistics_supply_chain as the best historical origin: Qualifying an independent supplier against capacity, quality, compatibility, and continuity criteria is a supply-chain resilience practice. NIST and GAO explicitly discuss second-source qualification and supply assurance; engineering and management govern technical equivalence and approval. The cited NIST, Building a Cybersecurity and Privacy Learning Program: Supply-Chain Second Sourcing; GAO, Second-Source Qualification directly supports the mechanism's defining operation. All independently supported contributing domains are retained without an arbitrary cap. origin_mode=cross_disciplinary_synthesis records the lineage relationship, while domain_reach=multi_domain records later applicability separately from provenance.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Researched adjudication after independent review; high confidence.
Sources consulted:
- NIST, Building a Cybersecurity and Privacy Learning Program: Supply-Chain Second Sourcing
- GAO, Second-Source Qualification
Notes¶
[n1] Second sourcing — the procurement practice of qualifying at least one additional supplier for a critical input to avoid captivity to a single vendor. IBM's requirement of a second manufacturer for the Intel 8086, which led Intel to license the design to AMD, is a widely-cited historical instance of a buyer forcing a second source as a condition of adoption. ↩