Sourcing risk arises when supply dependencies create vulnerabilities, such as single-source suppliers in high-risk areas, which can disrupt continuity during crises.