| Course | MT237 Supply Chain Systems |
|---|---|
| Unit | Unit 9 |
| Paper type | Disruption response plan |
| Length | About 860 words, 6 pages double-spaced |
| Format | APA 7 student paper |
| School | Purdue University Global |
| Program | BS in Business Administration |
| Updated | October 2026 |
Free sample paper for MT237 Unit 9
Ransomware at the Column Supplier, 7:50 on a Tuesday: A Unit 9 Disruption Response Plan
[Student Name]
Purdue University Global
MT237: Supply Chain Systems
Unit 9 Disruption Response Plan
[Instructor Name]
[Date]
Prairie Rise Desk Co., its supplier, stock levels, contacts and every figure are composite and illustrative; bracketed figures stand where records would supply the numbers; the sources cited are real.
Purpose
This plan tells Prairie Rise Desk Co. staff what to do in the first day and the following three weeks if its lift-column supplier in Penang is shut down by a cyberattack. It names an owner by role for each step, so it works even if particular people are away, and it is kept in print as well as on the shared drive.
The First Morning: Before 9 a.m.
The information technology contractor suspends the electronic document link with the supplier and blocks email attachments from the supplier's domain, since a compromised supplier's systems may send infected files. The finance manager freezes any change to the supplier's bank details; attackers often use a supplier's breach to send fake payment instructions. Federal ransomware guidance recommends these steps when a partner is hit: cut trusted connections and confirm any payment change through a separate channel (Cybersecurity and Infrastructure Security Agency, 2020).
By 11 a.m.
Purchasing contacts the freight forwarder for copies of the documents for the two container shipments already at sea, packing lists, invoices and bills of lading, so Prairie Rise can clear them through customs without anything from the supplier. Purchasing also asks the supplier, by phone, whether its factory is still producing even though its systems are down, and whether the next container can be packed and shipped with paper documents.
By 1 p.m.
The planner calculates cover. Prairie Rise holds about [5,600] column sets in its warehouse, about six weeks of normal use. Two containers at sea hold about [6,500] sets and are due in about two and four weeks. At [936] sets a week, that is about thirteen weeks of supply, if both containers arrive on time and demand stays normal. If January demand is running, cover falls to about seven weeks.
By 4 p.m.
The operations manager briefs the owner, sales and customer service. Sales is told not to launch any new promotion until the cover is clearer, and customer service is given a short holding statement. Purchasing contacts the alternate column maker in Taiwan, qualified last year with a sample order, to ask for its current lead time and capacity for [2,000] sets a month.
Triggers for the Next Three Weeks
Simchi-Levi et al. (2014) recommend comparing each supplier's time to recover with the company's time to survive and acting before the gap closes. The triggers below put that into practice.
If by day three the supplier cannot give a restart date for shipping, purchasing requests a firm quote and order slot from the Taiwanese maker, without placing the order yet.
If by day seven the supplier's factory is still not producing, Prairie Rise places a first order with the Taiwanese maker for about [4,000] sets, about a month of normal use, accepting its higher price and ten-week lead time.
If by day fourteen the restart date is beyond four weeks, Prairie Rise allocates remaining columns: drop-ship orders for the office retailer first, because cancellations carry fees and scorecard damage; then its own website; then dealers, who are told of longer lead times. Air freight of one pallet a week from Taiwan is considered if cover falls below four weeks.
If by day twenty-one the supplier has restarted, the Taiwanese order is reduced if the contract allows and the plan is closed with a review.
Thirteen weeks of columns sounds like plenty until a January peak halves it.
What Not to Do
Three mistakes are common in the first days of a supplier cyber incident. The first is paying an urgent invoice that arrives from the supplier's address with new bank details; attackers often time such requests for the confusion after a breach. The second is promising customers firm dates before the cover calculation is done, which turns a supply problem into a broken promise. The third is placing a large order with the alternate supplier on the first day, before knowing whether the original factory can keep producing on paper, which could leave Prairie Rise with months of excess columns once the original supplier recovers.
Contact Sheet
The plan ends with a contact sheet listing, by role and with a backup for each, the supplier's account manager and plant manager, the freight forwarder, the customs broker, the Taiwanese alternate, the information technology contractor, the bank's fraud desk and the office retailer's supplier support line. The sheet is printed and kept in the operations office, because email or files may not be available during a cyber incident.
Review
After the event, the operations manager writes a short account of which steps helped and which did not, and the plan is revised. Sheffi and Rice (2005) argue that resilience grows when companies learn from each disruption, and a short written review is how a small company does that.
References
Cybersecurity and Infrastructure Security Agency. (2020). Ransomware guide. https://www.cisa.gov/stopransomware/ransomware-guide
Sheffi, Y., & Rice, J. B., Jr. (2005). A supply chain view of the resilient enterprise. MIT Sloan Management Review, 47(1), 41-48.
Simchi-Levi, D., Schmidt, W., & Wei, Y. (2014). From superstorms to factory fires: Managing unpredictable supply-chain disruptions. Harvard Business Review, 92(1/2), 96-101.
What the MT237 Unit 9 assignment asks for
The ninth unit usually asks for a plan to respond to one specific disruption, often at a supplier. Write it as an operating document for a named morning, not as a general risk essay. Set out the first hours in time blocks with owners by role, so it works when particular people are away. Calculate cover early, stock on hand plus stock in transit divided by expected use, because every later decision depends on it. Then set triggers with dates for escalating, such as requesting quotes, placing a backup order and allocating scarce stock among customers. For a cyber incident, include containment steps for the buyer's own systems and payments. Add a contact sheet kept in print and a review step. Expect about five pages, including a checklist, a cover calculation and a trigger table in your own version.
How this MT237 Unit 9 example is built
The plan opens with its purpose and the principle of owners by role. The first block cuts the electronic link, blocks attachments and freezes payment changes, citing federal ransomware guidance. The second gets shipping documents for containers at sea from the forwarder. The third calculates cover from warehouse stock and two containers, with a margin note on why cover comes first. The fourth briefs sales and asks the Taiwanese alternate about capacity. Triggers at days three, seven, fourteen and twenty-one follow, framed by Simchi-Levi and colleagues on time to recover, and the highlighted line warns that a January peak halves the cover. A section lists three mistakes to avoid, including paying an invoice with new bank details. A printed contact sheet and a review step, citing Sheffi and Rice, close the plan with a second note.
MT237 Unit 9 rubric: what earns full points
Disruption response plans are typically graded on specificity, timing and practicality. Time blocks with named roles earn more than a list of things to consider. A cover calculation early in the plan shows the writer knows how much time the company has. Triggers tied to dates and stock levels demonstrate that decisions will be made deliberately, not in panic. For cyber incidents, graders look for containment of the buyer's own connections and payment controls. Allocation rules for scarce stock show judgment about which customers matter most. A printed contact sheet and an after-action review mark it as a working document for the warehouse office. Sources should support specific steps.
MT237 Unit 9 help from the desk
Response plans often fall short by describing risks rather than actions. Another frequent gap is a plan with no timing, so nobody knows what must happen first. Some plans leave out a cover calculation and jump to ordering from a backup supplier. Others place a large backup order immediately, which can leave excess stock when the original supplier recovers. Cyber incidents are sometimes treated like any other supplier delay, without blocking connections or checking payment instructions. Contact lists stored only in email are useless when email is compromised. With the supplier, the stock figures and the alternates you know of, our writers can help set the first-day blocks, cover and triggers.
Get an MT237 Unit 9 example written to your instructions
Tell us which disruption your Unit 9 prompt sets, whether a supplier outage, a plant fire or a port closure, and what stock and alternatives the case describes. With the rubric attached, a first custom plan costs nothing and returns within 24-48h, owners and triggers included. Missing figures are estimated in plain view. The paper above is an original model document written by our desk, not a submitted student paper and not an official Purdue University Global document.
More MT237 papers and BS in Business Administration samples
- MT237 Unit 1: Discussion Board Post
- MT237 Unit 2: Supply Chain Map
- MT237 Unit 3: Information Flow Analysis
- MT237 Unit 4: Vulnerability Assessment
- MT237 Unit 5: Inventory Calculation
- MT237 Unit 6: Seminar Reflection
- MT237 Unit 7: Supplier Comparison
- MT237 Unit 8: Logistics and Transport Study
- MT237 Unit 10: Supply Chain Report
- MT236 Unit 9: Seminar Reflection
- MT221 Unit 9: Seminar Reflection
- MT220 Unit 9: Seminar Reflection
- MT219 Unit 9: Seminar Reflection
MT237 Unit 9 questions, answered
How does a disruption response plan differ from a risk assessment?
A risk assessment asks which failures are likely and how much they would cost, before anything happens. A response plan assumes one has happened and sets out who does what, in what order, from the first hour. The example assumes the ransomware event is already under way, so its first page is a checklist rather than a probability estimate.
Why does a supplier's cyber attack call for containment by the buyer?
Because the supplier's email and data connections may now be controlled by attackers. Files sent from that partner can carry malicious code, and requests to change payment details are a common fraud after such incidents. A plan that suspends automated links and verifies any payment change through a known phone number protects the buyer while the supplier recovers.
How are triggers for a second source set?
By working backward from when stock runs out. If on-hand and in-transit stock cover thirteen weeks and a new supplier needs ten weeks to approve samples and deliver, the decision must come by week three at the latest. The example sets its trigger at day ten to leave a margin for slippage, and states that reasoning next to the date.
Where can I find a free MT237 Unit 9 sample paper?
The full MT237 Unit 9 disruption response plan is on this page. It sets out the first day after a supplier ransomware attack in time blocks, calculates cover, sets triggers for three weeks and lists mistakes to avoid, with margin notes.
Why freeze payment changes on the first morning?
Attackers often use a supplier's breach to send invoices with new bank details. Freezing changes and confirming any request through a separate channel protects the buyer from paying a criminal instead of its supplier.