firm's supply chain risk