Concentration risk hides one layer down, where many of your suppliers depend on the same fourth party, so a single distant failure can hit multiple services at once. That dependency is invisible today.
"How many of our suppliers secretly depend on the same fourth party, and what breaks if it fails?"
Fourth-party dependency map
Hidden concentration risk
To first outcomes