Two of Your Vendors May Actually Be One Point of Failure
If your two largest vendors went down on the same afternoon, would your continuity plan count that as one event or two?
Systemic and Concentration Risk
Correlated failure across shared infrastructure, vendor concentration, and cascading risk that single-point analysis misses.