The risk register, stated plainly
The previous lessons established the structure; this one asks what happens when parts of it fail, and what failure-proofing actually costs.
The concentration facts worth keeping on one card:
- Advanced logic: on the order of 90% produced by one firm, with the most advanced fabs on one island (Taiwan) that sits in an earthquake zone and a geopolitical flashpoint.
- Advanced packaging (the stacking and connecting of dies that AI accelerators depend on): dominated by the same region.
- EUV lithography: one vendor (Netherlands), itself dependent on single-source optics (Germany) and lasers (Germany).
- Critical materials: EUV photoresists, mask blanks, and the majority of wafers from a handful of Japanese firms; specialty gases with concentrated sources (neon refining, for example, was historically concentrated in Ukraine, a fragility exposed in 2022).
The risk types differ: natural disaster (earthquake, fire, drought, a single fab uses millions of liters of ultrapure water daily), accidents (individual plant fires have historically moved global prices of specific chemicals and memory), pandemics and logistics failures, and armed conflict, the scenario around Taiwan that motivates most current policy. A risk register like this is standard practice for any industry; what makes semiconductors unusual is how few nodes carry how much consequence.

