Foundational supply chain risk concepts