Author Archives: thedoctor

The Real Value of the Sourcing Innovation Mega Map (2026 Ed)

1) It shows you how expansive the space is and why you need proper Assisted Solution Selection:
[Successful Vendor Selection: The Series]

2) It shows you how unstable the space is:
a) Fifty-Four (54) companies are gone.
b) Ten-Plus (10+) have been acquired and/or renamed …
… and could be discontinued / go out of business at any time!
c) for some functions, there are too many options!

a+b) While a disappearance rate of roughly 6% a year is only about 20% higher than normal, it’s just the tip of the iceberg! Right now, the RCD (relative corporate debt) of a majority of vendors is too high and we’re on the cusp of a purge unseen in two decades (that most of you won’t remember). I am still predicting up to 15% disappearance for the next 18 to 24 months between

* mergers/targeted acquisitions so both firms can remain on the cusp of viability
* fire-sale acquisitions to pick up talent and customers
* outright bankruptcies from vendors who aren’t getting funding

because the market is still tight, the software project failure rate is at an all time high (88%, 94% for Gen-AI), and your C-Suite (who got burned last time) is still afraid to give you budget.

Post Edit: Happy to say I’m not alone. See THE PROPHET‘s predictions for the FinTech investment market for 2026:

c) even when you segment by spend-size (not market size), culture (not geography), and industry, you still can’t support more than a few dozen players. In some cases we have 100!

3) It proves that, statistically, there are quite a few vendors that are not good.

[How to Select a Vendor NOT likely to screw you over; Part of
The MOST important clause in your (Procure)Tech (SaaS) Contract Series]

I’m going to remind you again that some estimates put the number of psychopaths in professional positions in NA at 5%, 3 of the 4 top jobs they seek are Salesperson, Lawyer, and CEO … and they are all attracted to the industries with the most money. Right now, that’s FinTech (subsumes ProcureTech).

As many as 1/20 sales people/CEOs don’t care if you get value or not, as long as they get the deal. Especially when the firm took too much money and they have to hit unrealistic sales targets to keep their jobs!

For those of you who believe all founders and all sales people honestly want to deliver value, as a former developer/architect/CTO, I will tell you this: bullsh!t!

Some founders see their peers doing startups and getting rich in 5 years and just want the same. They’re building to sell, not to build long term customer value.

But sales people can be much worse! I have had the displeasure on more than one occasion to work for companies in tech positions where, even after the sales person was expressly told the product didn’t do X, couldn’t do X for Y months/years, and it wasn’t on the roadmap, still told the customer X was available today and they’d have it on initial implementation if they signed the deal now. (These are usually the same salespeople that never seem to stay anywhere too long …)

And here’s our updated Cascading Mega-Map 2026 Edition!

STOP PAYING PROCURETECH/FINTECH ADVISORIES A DOLLAR JUST TO LOSE THREE DOLLARS!

Last week, in our post where we asked if ProcureTech Generated Billions While Practitioners Lost Trillions, we noted three things:

  1. Approximately 1.8 Trillion Dollars (more than the annual GDP of 92% of the countries on Earth) will be wasted this year on Tech-Related Spending
  2. Approximately 600 Billion Dollars will be spent with the big consultancies and analyst firms who do Financial (Technology) and Procurement (Technology) consulting and advisory
  3. That’s three dollars lost for every dollar spent on big consultancy and advisory firms

So how do you stem the bleeding? Especially if you can’t STOP spending mooney on tech advisory because you can’t stop spending money on technology because you can’t survive in today’s digital world without it?

You STOP forking over (high) six and seven figures without a guaranteed return! In other words, unless they save you some coin, then your money they will not purloin!

More specifically, if they are promising outcomes, then (the majority of) their compensation should be 100% dependent on outcomes. If you don’t make bank, then their compensation will tank.

To be even more precise, don’t buy:

  1. any technology platforms where the majority of compensation is tied to successful sourcing events, transactions, etc.
  2. any GPO services unless it’s 100% outcome oriented
  3. any functional outsourcing unless the majority of compensation is tied to ROI

Now, the technology providers and consultancies will push back, steadfastly claiming that their technology and services are worth way more than they are charging, but here’s how you counter:

  1. you will pay a base annual fee for the platform that will cover 150% of their base hosting costs, so they won’t lose, and then a percentage of transactions, identified savings through sourcing events, contract value, etc. where the percentage is calculated such that if you save 100% of their promised savings, they will make 50% more than what you would pay on a fixed cost after negotiation — if they are so confident in their claims, this should be a no-brainer
  2. you will pay a fixed amount on each transaction, calculated based upon the expected savings before you sign the contract, and if they can deliver the savings, you will definitely be using them regularly — and, as with the Tech Provider, you will calculate this so that they win bigger than if you pay them a fixed cost IF they generate a return for you
  3. you will pay a fixed rate per hour that is enough to cover the assigned personnel cost (their salary plus 30% overhead), and any compensation beyond that will be dependent on the department delivering an ROI beyond a certain amount (which is the amount required to cover the basic fee you are paying them); and again, you’ll fix the compensation such that if they deliver 100% or more of what they promise, they will win big too

Now, you’re probably saying the doctor is daft by telling you to offer them 50% more than what you’d have to pay on a fixed cost basis if they deliver, but here’s the reality, without incentive, THEY WILL NOT DELIVER!

There is an 88% technology failure rate across the board, and 94% failure rate if it’s a (Gen-) AI project. The reality is, as we pointed out in our series on how, even if they have good intentions in the beginning, your (technology) vendor will screw you, the vast majority of systems fail to deliver, because, once the contract is signed and you have access to the system, they have zero incentive to do anything else for you.

Similarly, once they have you on a multi-year contract, why should the GPO or consultancy have any incentive to go beyond the minimum? If you want them to continually serve you and look for ways to generate a return for you, make it worth their while. And then you won’t be paying them one dollar just to lose three dollars in return!

This is where you start. Then, you question any consulting contract over 100K to 200K as a mid-market and 1 Million as a large global enterprise. At that point you have to define the value you expect and what gain-share agreement you are going to craft to ensure it.

Breaking Down the Risks: IP/cyber attacks

The risk of cyber-attack and IP theft over digital domains is constant and high and not going away. Not much need to be expounding the pounding on this one, but we will and give you a few tips on reducing the risk.

Expounding the Pounding

Cyberattacks remain high. Incredibly high. In 2014, a high year for cyberattacks, a NetIQ (acquired by AttachmateWRQ) Cyberthreat Defense Report found that 71% of organizations were affected by a successful cyberattack in 2014 (while only 52% expected to fall victim again in 2015). ( Source )

In 2024, North American organizations experienced an average of 1,298 cyberattacks per week, according to Check Point Research, which represented a 55% year-over-year increase in attacks. These attacks affected over 70% of of small to medium-sized businesses, according to Embroker. In other words, despite the continued increase in security software, standards and protocols, cyberattacks haven’t decreased, and neither have their success rate.

Reducing the Risk

Procurement is going to have to finally embrace cybersecurity best practices in everything they do as well as work with IT to ensure that all of the applications they buy or license meet these best practices as well.

Note that when we say best practices, we don’t just mean ensuring the technology meets all the latest specs, but that the organization, and its personnel, also ensures that they they take information security, operational security, and physical security seriously as well. An organization that doesn’t protect its information outside of systems is insecure, and if this includes passwords, the systems have been compromised with one login attempt. An organization that doesn’t maintain proper physical security makes it easy for an experienced hacker (who understands social engineering) to walk in, access a system that is logged in, extract the access keys for the broader systems, and the organization’s systems are then completely accessible by a hacker. And of course, if the organization doesn’t maintain proper operational security, its employees will let hackers right in no questions asked and all of the systems will be compromised.

This will require proper training and monitoring until everyone understands the issues across the entire organization.

Breaking Down the Risks: Natural/Man-Made Disasters

Disasters are on the rise. Why? Well, as per our last installment on talent, we are going to be expounding the pounding and giving you tips on reducing the risk.

Expounding the Pounding

As climate change has intensified, the number of natural disasters has risen sharply. Between 1980 and 1999, we experienced roughly 4,200 disaster events. Between 2000 and 2019, we experienced roughly 7,300 for an increase of roughly 75%.

Many of these were quite significant. According to the NOAA National Centers for Environmental Information, between 1980 and 2024, the US alone sustained 403 weather and climate disasters where overall costs and damages exceeded $1 Billion dollars (when CPI was adjusted to 2024) (Source: NCEI). The total cost of these events for the US has exceeded $2.9 Trillion dollars and resulted in 16,941 deaths.

Moreover, while the overall average frequency of Billion dollar weather/climate disasters over the last 45 years is 9, the average over the last 5 years is 23! In other words, natural weather/climate disasters are coming harder and faster than ever before (and the pace is still increasing).

If we turn our attention to the United Nations Office for Disaster Risk Reduction and review their 2025 Global Assessment Report on Disaster Risk Reduction (GAR), they found that while the direct costs of disasters averaged $70 Billion to
$80 Billion a year between 1970 and 2000, between 2001 and 2020 the costs ballooned to between $180 and $200 Billion a year and that disaster costs now exceed $2.3 Trillion ANNUALLY. Let that sink in. The global cost of natural disasters is now so great that only seven (7) countries have a GDP that exceeds that cost. In other words, the cost of these disasters, of which we now experience almost 400 a year (as the Emergency Events Database recorded 393 natural hazard related disasters in 2024, see ReliefWeb) exceeds the GDP of Russia, Canada, and Italy!

You’re going to be impacted by a natural disaster in the very near future to some extent. In most first world countries where a survey has been done the results are consistent: Four (4) out of Five (5) corporations agree that natural and climate disasters hurt because they were impacted in the last 5 years. Moreover, with the rapid rise in disasters your chance of not being impacted by a natural or climate disaster in the next 5 years is trending down to 10%. In other words, your chance of being impacted is 90%. It’s beyond the point that you have any chance of being one of the lucky ones. As per a 2023 Forbes article based on an Allianz Global Corporate & Specialty (AGCS) report, natural catastrophes are the largest driver of corporate insurance losses in the US because luck can’t save you now!

And we haven’t even started to talk about man-made disasters due to bad design, bad construction, bad maintenance, or just bad negligence that can result in entire skyrises being lost, manufacturing districts going up in smoke, ports exploding, entire swaths of land becoming unavailable due to nuclear meltdowns, global pandemics due to bacterial and viral leaks from research labs, and so on.

Reducing the Risk

Insurance

Do not, we repeat, do not forego the insurance! You will need it. However, unless you can prove you are employing best practices across the board this could be expensive. So you also need to employ a number of other best practices to make the insurance companies happy. (Although their Ren & Stimpy days are over. No more happy, happy, joy, joy because gone are the days when they only take in and never pay out.)

Third Party Vetting

Think those third party risk management / third party compliance management (TPRM/TPCM) solutions are a nice-to-have that you can wait on? Think again. You need to vet every supplier, every carrier, and every partner involved in the delivery of your goods from the factory to the store (and every warehouse, port, and transfer point in between). You need to prove you did your best to ensure only legitimate actors were in your supply chain so that you have some recourse (with insurance) when the shipment gets damaged or disappears (and to make sure you can afford your insurance premiums).

Overall Risk Vetting in Source Selection

Before you select a supplier as your chosen source of supply, you need to understand the 360-degree risks which are not just the supplier risks of financial stability, compliance, quality, human rights, and so on, but the risks related to its geolocation(s). Are there tensions between the country you are operating in and the country the supplier is operating/producing in that could lead to sanctions? Is there unrest that could lead to border closings due to uprisings? Is the area prone to natural or climate disasters that have been increasing in frequency in recent years? Etc. If the overall risk is high, and there is another supplier of comparable (which could mean slightly higher) cost that is considerably less risky, then you should be choosing the alternate, slightly higher, cost supplier.

Shipment Tracking / T(I)MS

You need to be tracking all of your shipments, and, preferably, have a Transportation (Information) Management System (T(I)MS) that integrates with your carriers. At the very least, you need to know when a shipment reaches each stop and then sets out for the next stop in the chain and know where it should be at all time. If the cargo is very high value or the carrier is a common target of criminal organizations because of what they typically carry (and that includes items like cell phones, laptops, and gold bars), then you need to ensure that the shipment is tagged and the truck, container, etc. is sending real time cellular signals at all time, that the carrier is monitoring their systems 24/7/365, and if a shipment ever goes dark for more than a few minutes or too far off course, and the driver cannot be immediately reached, law enforcement is immediately engaged. Unless, of course, you can afford to have 40 Million disappear! (A 40 foot shipping container can hold 44,000 iPhones. High end i-Phones are all 1K (or more) a pop. Do the math.)

Breaking Down the Risks: Loss of critical talent/limited talent availability

In our first series inspired by the latest and greatest CPO Survey that was just published by Deloitte, with the help of Spend Matters, which was designed to highlight, among other things, the latest and greatest “observations, challenges, and trends” in Procurement (and which included many survey results across enterprise priorities, focus, barriers to success, strategies, technologies, risks and competency gaps) we narrowed in on the top barriers to success that were common across all of the surveys and studies done by the big consultancies over the last five years. We presented you with a brief history, defined the core problem, and presented you with one more necessary realizations you need to make if you wish to make progress against the barriers.

In this series we will be tackling the risks, where we will be expounding on the pounding you are taking as a result of the risk as well as giving you some tips to reduce the risks. However, like the last series, in this series we will not be diving deep into the process upgrades or technological underpinnings you will need to adequately address them for the reasons discussed in the last series. Our goal is to give you the understanding you need to understand why the risks never change (and what realizations you first need to make if you want any hope of progress against them.)

Expounding the Pounding

As per one of our barriers to success on the talent gap in our first series, there is a talent gap which grows every year. This makes the loss of critical talent a major risk for many corporations who may only have one or two senior specialists capable of doing a specific, sophisticated, task that is vital to the organization. Especially when all of their organizational peers are in the same boat and there is a lack of replacement talent in the market.

This is especially true in sectors like manufacturing. As a result of decades of outsourcing and offshoring, and a lack of focus in the American (manufacturing) economy for decades, the number of senior, experienced resources in factory design and shop floor management is at an all time low and about to rapidly decrease in the next five years with the average manufacturing shop owner in the US being at least 62 years old. Let that sink in. A study by Crain’s Grand Rapids in 2021 found the average age four years ago was 62 and 70% of manufacturing business owners were over 59. (And America wants to bring manufacturing back? We applaud the vision, but we’re not sure how!)

Reducing the Risk

Unfortunately, in some industries, there is no way to reduce the risk. The talent is aging (rapidly) and the replacement pool is shrinking. (And with immigration being tightened in most countries, and forced deportations of all non-citizens in others, you can’t import the talent either.) The risk is only going to increase no matter what you do.

Therefore, you need to take steps to prepare for the inevitability and prepare your own critical talent (and ensure you have compensation programs and advancement opportunities in place that will make them want to stay once you embue them with the skills and knowledge they need).

In order to mitigate the risk to the extent possible, you need to do the following:

  1. install proper Knowledge Management Systems (KMS) and capture as much knowledge as you can from senior employees, document and institutionalize their processes, and capture their decisions and recommendations over time in the context of real world situations
  2. hire recent graduates or trainees with promise (and, preferably, not from business or procurement or operations backgrounds but from appropriate STEM (or Legal for contract negotiations) and have them mentored by a senior employee for at least a subset of the employee’s current role
  3. create, or (co-)sponsor, your own training programs (either internally or with partner educational programs) to ensure your next generation of talent is properly trained

That’s where you start. In our next post we will move onto the next major risk.