Supply chain risk assessment for business continuity