Strategic Risk in the Digital Supply Chain
In the digital transaction space, system down-time is not a minor operational friction—it is a direct and permanent drain on revenue. We can explore the strategic integration of risk in supply chain management by looking at the business environment risks and the design of engineering operational excellence initiatives at companies like Flutter Entertainment Plc.
The Perishable Transaction
Flutter is an online gambling and sports betting service provider with multinational operations. Customers are highly price-sensitive and will shop around for the best odds, given the competitive market for sports bets.
From a customer’s perspective, the digital service is entirely perishable, inseparable, and homogenous. Customers’ expectations of service performance are total correctness, near-real-time speed, high availability, and market-competitive odds (Slack & Brandon-Jones, 2021). Because the core product is perishable—a bet must be placed before the event happens—any downtime results in a lost transaction that can never be recovered.
The Macro Environment
While understanding internal operations is key, we must consider the outside-in perspective of the business environment and decide how to compete in the market. Porter (2004) models five structural determinants considering the focal firm competing with each.
The Five Forces of a digital ecosystem exert constant pressure on the focal firm.
The threat of new entrants in highly regulated digital services is low due to significant entry barriers (licencing, technical complexity), and the industry tends to be dominated by a few large groups. However, there is fierce functioning competition.
The suppliers and buyers (customers) are directly influential, making them a strategic operational focus in terms of risk. The barriers for a customer switching to a competitor are near zero. While the company could not operate without its suppliers, the risk can be strategically managed by using a variety of sourcing models (Slack & Brandon-Jones, 2021).
Supplier Structuring in the Cloud
The business environment and relative market power is a significant risk factor when structuring relationships with suppliers.
In the case of cloud computing service providers, there are relatively few suppliers; they are very large and powerful technology companies. By strategically investing in cloud-native technologies, an organisation can maintain a transactional relationship with several cloud providers simultaneously. This allows infrastructure to be hosted with multiple vendors, mitigating vendor lock-in and minimizing the cost and risk of switching.
Conversely, where a supplier is small and specialized—such as compliance certification reporting providers—having a close strategic partnership and a single-sourcing model is preferable. They operate inside regulatory jurisdictions and have established relationships with authorities. Crucially, they should remain external and never be vertically integrated, removing any perceived or realised conflicts of interest. Maintaining a close relationship with predictable, stable, and long-term agreements ensures they remain successful and in business.
Corporate Social Responsibility as Risk Mitigation
Fundamentally, sports betting is a leisure activity designed to heighten and enhance the enjoyment of sporting events—much in the same way one might enjoy good company, beer, and wings while watching a game. However, this industry is uniquely exposed to social risk.
Sports betting platforms are a significant target for exploitation to perpetrate fraud. Preventing and detecting these frauds requires robust processes to identify individuals and the movement of funds, in addition to compliance with relevant legislation. Internally, all employees must be vigorously screened and monitored to prevent corruption from entering or being harboured within the organisation.
Beyond fraud, the industry must manage the risk of social harm. Sophisticated processes rely on having data regarding personal disposable wealth to determine when play becomes problematic—for example, when losses become unsustainable. Providing access to support and self-exclusion tools are baseline industry practices to mitigate these harms.
If the industry is perceived to be negative or harmful to society, negative public opinion translates directly into changes in the political environment (laws and regulations), which directly impacts economic performance. Therefore, effective and integrated corporate social responsibility policies and programmes are crucial to long-term economic performance. Ethics and CSR are not just moral imperatives; they are fundamental risk mitigation strategies (Christopher, 2023).
The Micro Environment: Operational Excellence
Understanding the environment is insufficient without operationalizing key resources through routines and processes to execute core capabilities (Grant & Jordan, 2015).
Excellence in risk performance, at a process level, allows for the utilization of core capabilities and tacit knowledge to create strategic capabilities that cannot be easily emulated (Bailey et al., 2018).
Within an engineering team, operational excellence programs can be implemented with the specific goal of systematically improving resiliency. Dual responsibilities, termed DevOps, ensure that the same people developing the software are responsible for its operation.
By combining post-incident analysis into a continuous improvement cycle, formal incident reporting and review processes are created. During an incident, the operator responsible for resolution creates detailed notes on the specific actions taken. Post-incident analysis is then conducted for each incident, discussing root causes and cost-benefit analysis for new instrumentation or upstream process changes. As a low-cost output, documentation is continuously updated with better “signposting.”
With the benefit of hindsight from previous failures, new instrumentation and monitoring are added to create warning alerts that facilitate the prevention of future failures. However, when variance in telemetry makes alerts too “noisy,” the team opts to build graphs and dashboards for active inspection, rather than relying on reactive alert fatigue.
Architectural Resilience: Blue-Green Deployment
As features and enhancements are added to services, they naturally become more complex, resulting in increased deployment times and affecting overall availability. Combinational complexity increases the risk of quality control issues discovered in production.
A structural mitigation is investing in a service architecture called Blue-Green Deployment. There are two identical instances of the system running, with only one of the two shards receiving production traffic. Deployments of the new release are made to the inactive shard, and once updated and tested, the live traffic is switched over.
This decouples production availability from the ever-increasing deployment time. In the event of subtle failures, the operator simply switches back to the last known good release, decoupling the time taken to restore system availability from the time taken to root-cause and resolve the failure.
Conclusion
Strategic integration of risk directly improves the long-term success of business. Unlike a one-off upfront process design, the deliberate, regular, and sustained improvement in risk performance is highly effective in responding to the dynamics of a constantly changing environment. By integrating risk performance processes throughout operations, a company becomes dependable to its suppliers and reliable to its customers—creating a sustained competitive advantage.
References
- Bailey, C., Mankin, D., Kelliher, C., and Garavan, T. (2018) Strategic Human Resource Management. New York: Oxford University Press.
- Christopher, M. (2023) Logistics and Supply Chain Management. 6th ed. Harrow, England: Pearson.
- Friedman, M. (1963) Capitalism and Freedom. Chicago: University of Chicago Press.
- Grant, R. M. and Jordan, J. J. (2015) Foundations of Strategy. 2nd ed. Chichester: Wiley.
- Porter, M. E. (2004) Competitive Strategy: Techniques for Analyzing Industries and Competitors. Export ed. New York: Free Press.
- Slack, N. and Brandon-Jones, A. (2021) Operations and Process Management. 6th ed. Harrow, England: Pearson.
