BOM & Supply Risk
How to Manage Shortage and EOL Risk in a Production BOM
A practical guide for procurement and engineering teams managing electronic component shortages, EOL, NRND and long lead times in production BOMs. Learn how to identify high-risk parts, prioritize action and evaluate sourcing or second-source options before supply problems interrupt production.

How to Manage Shortage and EOL Risk in a Production BOM
A production BOM can contain hundreds or thousands of electronic components, but supply disruption is often caused by only a small number of critical parts.
One MCU enters EOL.
A wireless module moves to a much longer lead time.
A power device becomes difficult to source.
A connector is still available, but only from a single manufacturer.
Any one of these issues can delay an otherwise complete production build.
For this reason, BOM risk management should not begin only after a purchase order cannot be fulfilled.
A better approach is to identify vulnerable components early, understand the type of risk involved, and decide which parts require sourcing action, engineering review or second-source planning.
1. Not every BOM line has the same supply risk
A common mistake is to review every component in a BOM with the same level of urgency.
In practice, supply risk is highly uneven.
A standard resistor available from multiple manufacturers may be relatively easy to replace.
A specific MCU, RF transceiver, sensor, cellular module or custom connector may be far more difficult to replace because the design, firmware, certification or PCB is built around that exact part.
The first step is therefore to classify components according to both:
supply risk
and
replacement difficulty.
A part becomes especially important when both are high.
For example:
- Single-source component + long lead time
- EOL component + difficult firmware migration
- Specialized package + limited alternatives
- Automotive-qualified device + strict customer approval
- Wireless module + certification and software dependencies
These parts deserve attention before a shortage becomes an emergency.
2. Understand the different types of BOM supply risk
“Supply risk” is not one single condition.
Different problems require different responses.
Shortage
The part is still active, but current demand exceeds available supply or normal channels cannot provide the required quantity.
A shortage may be temporary.
The priority may therefore be original-part sourcing rather than redesign.
Long lead time
The component is orderable, but delivery may take many weeks or months.
This can become a production risk even when the part is technically “available.”
Long lead time may require earlier ordering, scheduled deliveries, additional sourcing channels or second-source planning.
NRND
Not Recommended for New Designs normally indicates that a manufacturer no longer recommends using the device in new projects.
The part may still be available, but the status is a warning that future supply and lifecycle should be reviewed.
EOL or discontinued
The manufacturer has announced that production will end or has already ended.
Depending on timing, there may be last-time-buy opportunities, existing channel inventory or remaining market supply.
For long-life production programs, however, an EOL component normally requires a transition plan.
Single-source dependency
A component may still be active and available but only have one practical manufacturer or one qualified option.
That creates risk because any future allocation, production issue or lifecycle change can affect the entire product.
Market availability risk
Some components remain technically active but are inconsistently available in the market.
This may result from regional supply differences, allocation, packaging constraints or limited channel inventory.
The appropriate response depends on the actual cause.
3. Start with the latest production BOM
Risk analysis is only useful if the BOM being reviewed is correct.
Before evaluating supply risk, confirm that the file represents the actual production configuration.
Check:
- BOM revision
- Manufacturer
- Exact MPN
- Approved alternatives already defined by engineering
- Quantity per assembly
- Annual or forecast demand
- Current production schedule
- Critical notes or qualification requirements
Duplicate MPNs, old revisions and manually modified spreadsheets can create false risk signals.
A component should not be escalated simply because an obsolete part still appears in an outdated engineering BOM when production has already moved to another revision.
4. Identify the parts that can stop production
The goal is not to create the longest possible risk report.
The goal is to find the components that can actually interrupt manufacturing.
A useful review asks:
If this component cannot be delivered, can the product still be built?
If the answer is no, the component is production-critical.
The next question is:
How difficult is it to replace?
This creates a practical priority model.
High priority
- No current supply or severe shortage
- EOL with ongoing production demand
- Single source
- No approved alternative
- Replacement requires redesign or firmware work
- Long qualification process
Medium priority
- Supply currently available but lead time is increasing
- Alternative exists but is not yet approved
- Multiple sources exist but only one is currently qualified
- Demand forecast is uncertain
Lower priority
- Widely available commodity component
- Multiple qualified alternatives
- Easy engineering substitution
- Low production impact
This approach prevents teams from spending equal time on a $0.01 resistor and a critical processor that can stop the entire assembly line.
5. Do not rely only on current stock
A component showing available inventory today is not automatically low risk.
Current inventory answers one question:
Can we potentially buy this part now?
It does not answer:
Will this part support production six or twelve months from now?
A robust BOM review should consider:
- Lifecycle status
- Manufacturer roadmap where available
- Normal lead time
- Number of practical manufacturers
- Number of approved alternatives
- Historical supply stability
- Forecast demand
- Production lifetime
- Time required to qualify a replacement
A product with five years of remaining production has very different sourcing requirements from a one-time build.
6. Separate procurement actions from engineering actions
When a BOM risk is identified, the next step depends on whether the problem can be solved commercially or requires a design decision.
Procurement actions may include:
- Finding the original MPN through additional supply channels
- Confirming available quantity
- Reviewing MOQ or MPQ
- Negotiating scheduled deliveries
- Reviewing packaging and date code requirements
- Considering earlier purchasing
- Building safety stock where commercially justified
Engineering actions may include:
- Reviewing approved alternatives
- Evaluating second-source manufacturers
- Comparing package and pinout
- Reviewing electrical characteristics
- Testing firmware or software compatibility
- Updating PCB design
- Requalifying the component
- Updating approved vendor or approved component lists
These processes should work together.
Procurement should not recommend an unverified replacement as if it were the original part.
Engineering should not assume a technically suitable alternative automatically has a sustainable supply position.
7. EOL parts need a transition strategy, not only a spot purchase
When an EOL component becomes difficult to source, the immediate reaction is often to locate remaining inventory.
That may solve the current production requirement, but it does not necessarily solve the lifecycle problem.
For an EOL component, the team should estimate:
- Remaining production lifetime
- Total future quantity requirement
- Current usable stock
- Last-time-buy opportunity, if still available
- Storage and shelf-life considerations
- Cost of carrying additional inventory
- Availability of second-source or replacement candidates
- Engineering effort required for migration
- Qualification time
- Customer approval requirements
Sometimes a controlled last-time buy is the lowest-risk option.
In other cases, redesigning earlier is safer than depending on increasingly scarce market material.
The correct decision depends on production lifetime, engineering cost, availability and business risk.
8. Evaluate alternatives before the shortage becomes critical
The worst time to begin replacement evaluation is when the production line is already waiting for material.
Alternative evaluation takes time.
Depending on the component, engineers may need to review:
- Package
- Footprint
- Pinout
- Voltage and current limits
- Timing
- Temperature range
- Interfaces
- RF performance
- Memory
- Peripheral functions
- Firmware
- Drivers
- Certifications
- Qualification level
- Thermal behavior
- PCB layout
- Lifecycle
For some components, a second-source device may be almost straightforward.
For others, replacement effectively becomes a partial redesign.
By identifying risky components in advance, teams can evaluate candidates while the original part is still available.
That turns an emergency replacement into a planned engineering decision.
9. Approved alternatives are valuable only if they remain current
Many mature products already contain alternative part numbers in the BOM or AVL.
That is useful, but it should not automatically be assumed that those alternatives are still viable.
An approved alternative may itself have:
- Entered NRND or EOL
- Developed a long lead time
- Become regionally constrained
- Changed package availability
- Become commercially unattractive
Therefore, an alternative list should also be reviewed periodically.
The objective is not simply to have a second MPN in the database.
The objective is to have a realistic second source that can still support production.
10. Use demand and production horizon to prioritize action
A risk has different importance depending on how much material is needed and for how long.
Consider two scenarios.
Scenario A
A component is EOL, but only 500 units are required for the final production run.
Existing market supply may be enough.
Scenario B
The same component is EOL, but the product is expected to remain in production for another four years at 50,000 units annually.
This is a lifecycle problem that probably requires more than short-term sourcing.
A useful BOM risk review therefore combines component status with:
- Quantity per product
- Monthly or annual consumption
- Forecast production
- Remaining program lifetime
- Existing stock
- Open purchase orders
- Qualification lead time
Without demand context, it is difficult to know which risk deserves immediate investment.
11. Review the BOM regularly, not once
BOM risk changes over time.
A component considered low-risk six months ago can become constrained after a factory issue, demand increase, product transition or lifecycle notice.
For active production programs, BOM risk review should therefore be repeated.
The exact frequency depends on the product and supply environment, but common triggers include:
- New production forecast
- Major demand increase
- Supplier lead-time change
- Manufacturer lifecycle notice
- New EOL or NRND notice
- Repeated purchasing difficulty
- Product revision
- New customer qualification requirement
The goal is not constant administrative work.
The goal is to detect meaningful changes early enough to act.
12. What information should be included in a BOM risk review?
For practical review, it is useful to provide:
- Current BOM
- Manufacturer
- Exact MPN
- Quantity per assembly
- Required production quantity
- Target delivery dates
- Existing stock where relevant
- Approved alternatives
- Known lifecycle concerns
- Critical technical requirements
- Application
- Destination and end use where required
The more clearly production demand is defined, the easier it is to distinguish an urgent shortage from a longer-term lifecycle concern.
13. A practical BOM risk workflow
A practical sequence is:
Current BOM → MPN and lifecycle review → identify critical items → assess supply and lead time → prioritize by production impact → source original parts → evaluate second-source options where needed → engineering/customer validation → update purchasing and BOM strategy.
The purpose is not to replace every single-source component.
It is to make sure the organization knows where the real dependencies are and has enough time to respond.
How BOM-Cost supports BOM supply-risk review
BOM-Cost supports procurement and engineering teams with electronic component sourcing, BOM review and potential second-source or alternative evaluation.
For production BOMs containing shortage, EOL, NRND, long-lead-time or difficult-to-source components, the review can begin with the original MPNs and current production requirements.
Where the original component remains the most practical solution, sourcing options can be investigated.
Where longer-term supply risk justifies further action, potential alternatives or additional manufacturers can be reviewed against the available technical requirements.
Alternative parts remain subject to engineering review, qualification and customer validation.
If one component is already affecting production, submit the MPN for sourcing review.
If multiple BOM items show shortage, EOL or long-lead-time risk, upload the BOM so the risks can be reviewed together.
Need help reviewing supply risk in your BOM?
Upload the BOM so our team can review sourcing priorities, lifecycle concerns, and quotation requirements.