semiconductor supply chain risk quantification