What is the BEST reason to include supply chain risks in a corporate risk register?

Risk registers are documentation and governance tools used to track and manage risk, not financial instruments or funding mechanisms for procuring SCRM systems.

A risk register serves as a centralized repository that classifies and categorizes all organizational risks, including supply chain risks, enabling consistent scoring (e.g., likelihood and impact ratings) so that SCRM risks can be directly compared against other enterprise risks for prioritization and decision-making. This allows leadership to weigh supply chain threats relative to financial, operational, or regulatory risks using a common framework.

While risk registers can reference residual risk for individual items, their primary and best purpose is the classification, categorization, and comparison of risks - not solely illustrating residual risk across the company.

Risk transference (e.g., via insurance or contracts) is a risk response strategy, not a function of a risk register itself; the register documents risks and responses but does not itself transfer risk to third parties.