Supply chain sustainability risk assessment