semiconductor supply chain risk transfer