Supply chain ethical risk assessment