supply chain risk sharing