March 11 marks the one-year anniversary of the Japan earthquake and tsunami—foremost a terrible loss of human life, and also a painful demonstration of supply chain risks in a globalized world.

One year after those events, risk-management efforts are still trying to catch up.

Many businesses probably aren't as prepared for supply chain disruptions as they should be, experts say. “Overall, most companies don't have a strategy for managing supply-chain risks,” says Jerry O'Dwyer, leader of the sourcing and procurement practice for Deloitte.