Do risk score values still need to be provided in the CDIF for real suppliers, or are they automatically populated?

It depends on the type of risk score being used in the application.

1. Risk Scores Automatically Populated by Resilinc (No CDIF values required):

The following risk scores are location-based and are automatically generated by Resilinc based on the supplier/site location details (country and geographic coordinates):

• Macroeconomic Risk 
• Geopolitical Risk 
• Natural Disaster Risk 

These scores typically populate within 48 hours after the supplier sites are successfully added and geo-mapped in the application

2. Risk Scores That Must Be Provided Through CDIF or a Third-Party API:

The following risk scores are not automatically generated and must be explicitly supplied through a CDIF upload or a third-party API integration:

• Financial Risk 
• Custom KPIs 
• Any custom-defined risk factors 

If Financial Risk values are included in the CDIF, they must be provided explicitly and should remain within the supported range of 1–10. Values exceeding the allowed limit may prevent the scores from being processed and displayed correctly on the UI.