supply chain vulnerability