supply chain risk quantification tools